last executing test programs: 1m6.41056745s ago: executing program 0 (id=1025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x6, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x20, 0x700, 0x0, 0x10000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000014000500fc0100000000000000000000000000000800020000000000"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x4}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048801}, 0x44050) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f0000000340)=""/57, &(0x7f0000000380)=0x39) 1m6.099554384s ago: executing program 0 (id=1030): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000001640)=@ethtool_ringparam={0x11}}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) 1m5.707106266s ago: executing program 0 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m5.551555223s ago: executing program 0 (id=1040): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @array]}}, &(0x7f0000000f40)=""/4087, 0x3e, 0xff7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000000)=0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1m5.183599963s ago: executing program 0 (id=1046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="e6f85e"], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) recvfrom(r0, 0x0, 0xc00, 0x2, 0x0, 0x0) 17.818251226s ago: executing program 1 (id=1616): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) (async) recvfrom(r0, &(0x7f00000000c0)=""/191, 0xbf, 0x0, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x80) (async) r2 = socket(0x2b, 0x4, 0xffffffff) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x58, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x20, 0x6, "24c81c93dbf1ed1a1800576bae313172c7f4b0b7e34d30553bdb346a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x25c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x324}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000600)) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000640)={0x11, 0x10, r1, 0x1, 0x10, 0x6, @remote}, 0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x74}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) socket$unix(0x1, 0x5, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={0x0, 0x8f, "1535a03cda9913190a7980a895b9919606b636edbe8e3265c06d3e32314b501ecbb55fb0835da2f57d764a6cd5aa1868bc88607b064dbce4ecb572d0590116a34110d13e1f02f3a18a0df2ebe0e3d22611a6ad46239a130b121192acd9f409c8626c4b479a52f03375871c914ad0a01b00dceaf005911970eb30ee73040d0380521793092d9cec6e952f5c4702cd92"}, &(0x7f0000000980)=0x97) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000009c0)={r5, 0xd7, "568ae98e46e717b57ecc8cfabcd9d2041608c043706fea2a51756ec7ea72cb6ca3fdd9cdcb69c1fc5030aaefe76a9ad2e22418fbbb978ee1a41cf4ca942ed96cada6871a3dbdcd0919e24e69b5785ee30b2c7893c098dc24a864ac74c89debe07fd36b5dcd43d721cafbd8b098ee3cf7d0db4f1c9e362c8e844c359121acebd1c65057e2310c7bd71587b5cdcd317c3d0ae19c5120aeab408961a7cc881af0e68be22792717b885247ec55eccc0b69792a05dcf0589fa996f81749779742cf5b83829ceefe1d4d133a9a559edac6ec744b9879ab7b40fc"}, &(0x7f0000000ac0)=0xdf) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000004) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fffffff, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x400180, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000e00)=@ccm_128={{0x304}, "3a4f0388450bc96c", "81eccc24d0f8c1570e5b900f00f1c6c0", "ad787098", "080997cebcd053e7"}, 0x28) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r3) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r11, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x86}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c4}, 0x2000) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sendmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000013c0)="db7c3ec98d6a7b0bef04606cc7f6437bc877b1311f0eae0222d1b57ba56a17807f38eb24355e02fca22d061f59c5169e064b2b15e40bbb3c7c085c133c944d05fa0fdbd08e2be3b4858350a3fef8f5d97fe97b046b052de4948b6ecb72f3495a226d6a7c54d8aa2bb90681e8ef8fecaac455935a12f81b2362e3875330a43ed6f6d6f45ea1f55022af1da1985cec4af68c736894d6ebc98c", 0x98}, {&(0x7f0000001480)="c3c0", 0x2}, {&(0x7f00000014c0)="be7bc18c68f830bbbf2728accb619e66276968caf9a6861b4dbda23692786dec38d129b11f8ea13b1ad1cdcbd4", 0x2d}, {&(0x7f0000001500)="131fe8d78e5ca57167f6b76c0f1ccc3b3d858b97423d53361f0bfce9eaf602dff860a1dc1f42684c5896d76b87e66871e3383ab445b42b727964bb99561b3dcf0801192f8d9d736acb4265d152776144a3f19629b0fdd4f574dc5c7213473016881aa5e9a7c2015b2ccc11c7f1bc66aa099952b48936d3d581b9d3aba0d33556a475fd03484c94f2470975a9b0ba594a6362d4b352650746bf9ca80fa08367f7ebe00befba502a601fac85c0a9", 0xad}, {&(0x7f00000015c0)="66483640b083963c3c13010f572e008531b3532cfa60e3c29a18cc9706f0606a053dbd1c40ceb3302ac2279efebf2067974909daa24caa8ac5", 0x39}, {&(0x7f0000001600)="7dc61deb62b3bf919135d489257d8c3b4fbc5d08325b5bfd18e5c5f77228bfd96837fd65a9e853f90887e2e301f694a47173f94fdeca524905385480b07e77903a72df295a9573b839f74ccba10e7817b96ef795b6cd9debfdfe", 0x5a}, {&(0x7f0000001680)="f9c6247ffdcf5fac9e12f011574b72cfecfaa12656b5e4f18cedc208083c930b582a060458dd784e4bd3fb3546372008ce5f0294f0ec4736da9fea101e3000bde47f674f166b10d3e33f8a6ec45784f6a8753d9ff33522c21493f3c10167291874184e7ab704e72fd704414dbc4dcd8d25ccdf85c07dd684925d1a4c6cc0134598263ea4a433fb950c84e258dd156946", 0x90}], 0x7}, 0x0) 17.392811934s ago: executing program 1 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800b0a48c4f9cbfae0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) sendmsg$tipc(r5, &(0x7f0000000ac0)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="a43cae14f5f79a7771f17e0fcb58d8885432f6df90bdf66ae65c1dbbcdf04a36e8ccf2f9fe137b4f9b80bc5b75b5ac0e688ce0f7151f2f75141882c743d4ca5e5d0290446f460b", 0x47}, {&(0x7f0000000640)="edf2095caade89f3fd0e20a61287b15219880c588ebc78c2", 0x18}, {&(0x7f0000000900)="b917c8ef3f46574118cfa2d5f373cf20c1de12d8d79c3d31b031661eaaad294ba875e63e6219852c", 0x28}, {&(0x7f0000000940)="9a10222c82473fb8416b68b296e2fa8d9d766c0a5c97554d1932acfba6fabbc74b438d2fba3884bb6ae168c146e961229a6fd195884ca8", 0x37}, {&(0x7f0000000980)="b3da4a7771788f2b4e1a6e23ea552aab95c9a534f5d805843b42d76dd705e5c79c248bf511e0e80c7346c283243295f4168f1057ead2e4b8bbccede8d33251b0e8f3b7bc16a0abb8afb0aa5e512169179b92e79b58cb1c406bdb65ee3d3bda", 0x5f}], 0x5, &(0x7f0000000a80)="dbef4102e6b557d0482995da31fb7ec2272fc819bb246549faf67fd4bf7caa4223", 0x21, 0x4000000}, 0x20008000) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000000010002", 0x7) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x111, 0x4b4, 0x278, 0xd4feffff, 0x3b0, 0x20a, 0x278, 0x3b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [], @ipv4=@multicast1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [], @ipv6=@mcast2, [], 0x0, 0x3502}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv4=@broadcast, [], 0x0, 0x0, 0xff}], 0xf}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0xe775, 0x14b2f, 0x0, 0x0, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bab250709f46abd5bde532173c6746623ee609e386a0905c3ef0f3051738"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x6}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x67, &(0x7f0000000800)=""/103, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x204}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x5, 0x1, 0x9, 0xc}, {0x4, 0x4, 0x10, 0x8}, {0x2, 0x5, 0x2, 0x5}, {0x5, 0x1, 0x7, 0xa}], 0x10, 0xd530, @void, @value}, 0x94) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r9, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000007c0)=r8, 0x4) 17.1643542s ago: executing program 2 (id=1626): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) (async) recvmmsg(r2, &(0x7f0000000d40)=[{{&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x7, &(0x7f0000000800)=""/70, 0x46}, 0x9}, {{&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/34, 0x22}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/143, 0x8f}], 0x5, &(0x7f0000000c40)=""/205, 0xcd}, 0xad73}], 0x2, 0x24, &(0x7f0000000dc0)) (async, rerun: 64) r3 = socket$kcm(0xa, 0x2, 0x88) (rerun: 64) sendmsg$inet(r3, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000000), 0x5}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x1403, 0x300, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8002) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "ae8ebd61000033d6", "2607080d7f4fcf00fd4ef2dece6c7c58", "ceb0597e", "faffffffffecffff"}, 0x28) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000000)="6ddcf7bd022bbb088ce59e671a1f541f7be94a8692b020fab5e0a105fb4df6cc4751b45c7b3124710b2a662246e7959f1aa6f7020144d052bba643bfea823cd131105b80c870ef1b42c1c2851f2d9c3ac226edfee12b5c5fa998051c449d50399218da60feab429f876b5049309bf2f46926d504666d6191b38aac11ff994d593a2731eeaa14ab80d9eedae27abe39bacebd5e1efdb46b8cb17072ca3f", 0x9d, 0x4000000, 0x0, 0x0) 16.979780802s ago: executing program 4 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x38}}, 0x0) 16.966205583s ago: executing program 2 (id=1628): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x12, &(0x7f000000c280)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0xffe0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 16.951712474s ago: executing program 1 (id=1629): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, '\aQ', "ee4222", 0x22eb, "15a85d790ce4ceb460b47feea940260082b1b0b768c4"}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x29, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="098cc0119d8fa6b1cf665cc165363834d253f49217d597b817747a72213d7170b91aff1486728f72c4e3de630c40817c077237300d4eded5153eec671e85c52e32195de7ecd7"]}, 0x64}, 0x1, 0x0, 0x0, 0x10000}, 0x4c004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000240)="086aa4ed10a2935680ffa335a3ae4a720913b9f6a68cc8af867029982fc567443563b5fe4858ff40181cb2c29327523978fbddf82704b981dc5ba63eccbd62f41c865f0e91dcd5f00eb3756b065a7b539922b3e7649fdf3195a33b6fdd43923a17a765ad12c07e6ee1406494c2683f17b437b3fac1cefe5a69c2aabb6bb419d1fe46a4d522de4d8f7fe88625430a3a409657d36ffaf61d2065b9c7f373cb82f9b9ff49501d2836f3ed8a6e2fde759e7a3dfbbc5a14014b87d22a2050691ec9d853b4fcb33a1f88cbb4565886de33c579dd4d943b27512d126785d85d74f9b9583142e3429817225c33673f07ba", &(0x7f0000000340)=""/7}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2cc, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {0x18}, [@nested={0x133, 0x1, 0x0, 0x1, [@generic="e9c8a0bb7a435efe52b688a3ccbc200687581c07c69f1727592f15d219b0eebca2fc6ecb84877f1ff74043ed1a3f1c6f23b1132f97b6180094b0834d7c96ddc644ebcf0f2a1d7c7a87", @nested={0x4, 0x149}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@multicast1}, @generic="4203fc2610a098e5aa01360a35500ebe8ba2016c829b04303db1dfd30f22c3ea9fdc7d92f3a9fad3b4396a36af18cca16e297a5d0dec09635422bc125bef284cb4caae99fbecf2c8c93ff932daff4fdc06ff0a30901ea8065564e730e9658021b957d7038a7bb92c6d39d4a10af35ee34d345b2d2955f4d804758d021797f9cbe4b4c50aa46e4df31db674572e06ae712a49a903557958", @nested={0x4, 0x2e}, @generic="df2ea1e5ce32b0c8987d8e5e391e589736eea9b86dcb0b01a91890a06b96e4636545cf181ddbc50ca05cdc271bd59ff7e47990c88a8e79", @typed={0x4, 0x75}, @nested={0x4, 0x109}]}, @generic="22f8427f0f08759ff697ce86c2e2dee5be67281ed9ec35c41603ec047d8aa45704f6232a81320126d6740e81431aeab68771fc5f5beb73340d8e961d7882eae7cbc7623c28d5c7d097c4ce083c8e11a294fe6e93183d19e473170cd3793ac931d2bfd7fd1c2a9549e69b7a21e6e0eae9afd03ee18ecaf114e9e80ae3d84ede05b0b8f74f80e30054754442233e6555cc93ac05043d90befbc6d3d1507cee347b9aea997b76bb6bda52b50fc1f128256791901c0528923e2776e7e9e508d5b9417039aae35de49a4924b8da16884253d78d2002c046e36fddbdb6bc71f912c6a3b4930cc9902b244ec6abe0d93565fe5c3b82df25baacaec9115277", @typed={0x4, 0x149}, @generic="d99103e8975aa768388b720f47bc4364de4db143efa83dd12d78b131430874a03bb8869cac3b2a16e3", @generic="0aec488805bac6b18e79dae39b0dc3deddde1a79c6ea02471dead56c2520d26024bbcb9bee6a3ad6026ab928deb2ca1d1942deaf8ad7f05e61d8699fc69a7a244d59f5f602aed44eadbb748174ece89e227419", @nested={0x8, 0x82, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40004}, 0x4008001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000780)={r1, 0x81, 0x8}) bind$bt_hci(r4, &(0x7f00000007c0), 0x6) sendmsg$NFT_BATCH(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x43, 0xc, "cb9ed14228649808717fa98d6b0a7dddc811f242facd97edd7a5c15cc02a03b11abda2f195080e442fa6871e34aa376d87fe69e5d67f5f8f75e8e244c62cf3"}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x68}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd8}}, 0x20001000) unshare(0x28060200) getpeername$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x45, &(0x7f0000000a40)=""/30, &(0x7f0000000a80)=0x1e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x840) sendmsg$nl_route(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@getneightbl={0x14, 0x42, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0850}, 0xc805) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000e40)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001140)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x274, r11, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "0c81f68401774a55af51135003b4492edb255c3ff11a47e6e906cbec41ed195cc7b1e701d04a6ada5c810163a62106c878a7a23b159d59b5c2186d7e2714bb8d25b187d4602013bd243642c10ee9db5ae91e6c7cbccde7fb28b41e374fd4e48b506c021e40ec6c34fbf5b52575f4f8b12b429dac0f303395be32e119d9424828e9101d932bf754"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "01c71687b5d7a3e048f951483fe9e9feea977ac2659f2baa41769cfcb027c57596dc8519a4c214868f534cf393de613f7ba0668f3b747d1af59d4bc7ec98774745b5d9eb7ce39c0c9b4fe0f2f2c06a26a0e800c23c38df4a5221f2b1e6dc40d0fa6085551e5c3645541d060ca102b3fa125c1fa011b39084150685ed"}]}]}, 0x274}}, 0x10) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000011c0)={0x3, &(0x7f0000001180)=[{0xc, 0x7, 0xc, 0x1000}, {0xc, 0x5, 0x1, 0x3}, {0x3, 0x8, 0x70, 0x3}]}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r13, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x2404c004) 16.903694469s ago: executing program 3 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) syz_emit_ethernet(0xf8, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000c23a0000000000000000000000ffffac1414bbff0200000010000000000000000000018b0090780046b9e200000000000009082685cbe4df8cc6e9fda13fa51809c31eab9d7e7474ca6c5e6c6a4de2d6b5c13d2509d376e953dfd438a73112cd4ffa3df6342349cb965a67229961dd85249d533f50d86322247527ea36bf9daed5cd771f920f2ca3ac0d3168e8f9bca07f929a3a94d5816f07e45e5b83151bd78179479912384cebbc9713faf9f4e2ef65b00abc82d9c20fc090db9c8b86afdd1f7e74c1c68716385c825333e9e02e12bd671f6d1115241b141428aae246e860423a592ab0"], 0x0) 16.890377038s ago: executing program 4 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc, 0x5a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x654}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4d8a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100002d0001000000000000000000050100800c0011002000000000000000140001000000100000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d764351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1000000"], 0x118}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="defa0f99be3845550b0c77eea4357e424930d740a46d04006c3b1a2fe95ffdc8acc5305160f16dea8fdec08fdf23279fd27be1efc807afc2e74fddc469f6", 0x3e}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r11, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x4c000}, 0x10008080) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)={0x2d0, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x228}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a8280577709ea3c083a34bda3dda26294a704861e2d2a8d1f75c96a5ba92f8f79bdd08"}}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xda}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x317a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x370}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x11bf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe91e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r12 = socket(0x11, 0x2, 0x0) setsockopt(r12, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) close(r12) setsockopt$MRT_TABLE(r12, 0x0, 0xcf, &(0x7f00000001c0)=0xfc, 0x4) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.782744794s ago: executing program 3 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000209d300036716832ac972c9ac5d004ca08935906897a0e20"], 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) 16.622428316s ago: executing program 2 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r1, @ANYBLOB="130f00000000000000000700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 16.49544902s ago: executing program 1 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1, 0x40, 0x400, 0xfffffffd, 0x25dfdbfc, {0x1a}}, 0xfffffffffffffdff}, 0x1, 0x0, 0x0, 0x80}, 0x4008820) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x44040) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x81, 0x9, 0xc, @remote, @rand_addr=' \x01\x00', 0x20, 0x20, 0x7fff, 0xfffff001}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000001740)={0x6dc, 0x0, 0xa09, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x404, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "b33ecee578ab644037875c91993268b48e9cbfb66f6e63ccdac1cfc840428541ffa7be44967cc3787ced0c1747c65d460c590a5cc7e3b4c7ab45829d81b436afeb041e907d852b573a83aa49b171605c0fcc848caaffff1d94484b2095b7b228acaf616d283693ba45a0fcc2425648a7d0c567006c633fed0bc1a90db415c9724c856059fc6b8bdaf2fb164fc341bca256eeae8f26a810a841fb5d4a678be22932fb3994987a693ca5b99ff946dce9c0ea8bdc323090b9b68078f1d2b025e1956103cfd2aae2f8172980f8e6e4ff983e3cdcab7455eed44f8c2abf876427a4bac809d090d828e8d3f32a5fce3994bf0e05ee540828"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd90}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0xf8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-.\xd8\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfad6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc3, 0x2, '\x00\x00\x00\x00\x00\x00i\xbd\xf1\xd4\xb0\xaa\xd9R;@`\"K\x92\xdfM\xb8\x1b7-p\xc8\v\x15\x01\x8d\xfcC=\x87\x02\x92\xa8\x93\xc0\xd7\xc6\xc4\x11;\x18\xdbf\xf3\x10\xa4\x99\xb5T?\x7fp\x19k\x01+\x1dz1\b\xc0-\xaf\xcb\xd4\x96\xca\x11@*\x82\xcdd\xa7\xed\xd2\x18\xc6\a\xb9\xc9\x05\x00\xa7\xc5\x81\xb20\xa5\xb7\r\xa4\x0e\xae\xe1C\xe5\xef\xdf\x9cg\x8a\xba\x965hK\xf6A_\xba3\xb7\xa3\x1c0eII\xfbo-\xcdo_\xbd\xed\xae\xf172\x98\xe5\x12\xc1-\xef}~\x8d\x0f\xde\xef\xd3\xbb\xd8\x1c\xa1\x11\x85\xdd7\xb8\xd5\xe7\xa8\xfaW\xdb4\xd1\'6t\xb7K\"\x96\xd7f=:\ao\xb4D\xc2\xd8\x81c\xb3\xe6U\x02\xbf'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "1d3a97c185f7b8f175c3c7e6d65d8bad77eef0e4686c8d8020b3b08c480a804b75d11587d40140cb30831c357ffc7de166db448a4aeedcf63060d01d5fd66cc56dff5b53ca0d6d0a22be66fc621af1fda427940138177ba7578046ea01f17414b86c82bd0883eefa1c98cadf8d45ec69333dc1"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "f6ebc5e582442131917cd11f468ec01dd7a22072a2d3e3120dc70bcf24ab17f7054251d1ff90aff395060fc290122793acc7f5761e3f93aaa9f2c10852dfea0e1c32ed30159c5857d7d65a1e887eace5a774b0778178e1bc9cd19adf0660d924e81e90d0d18081de9ed7b6d6871b823c893cbcf741732eb1a616f9e8e8cf454794a34351ab4c2eb1cd16d7b4ecdded9a87e4038dd68956678dea2a3e1c0ef83e0fbfe59ba25d965e6a0dd3828321ae2ee76e6af91a859545bf0c657f22d93625c7"}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "9aaa24fd6e80d97677b8133102d8b665647f81c1cc561f5f6e265fec57dd8c40c1b86f838f1c2fb74c3fcd93cd15c8e381e882000af8fd76b1756ce747a8513399947a68ea4ff9f54d685b4b2796b9e5270208b8030183a3f9020a35a4b6af18285cf3da17880fa4292d2e2276563044d4d9c32eb6403d5c3144a1a17219b72893ee5da129e54733453992c016"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd7bd}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "0fbe6c6e72533adbf40d1e1c0cc09cf7b7398b7841fefd08669071e76ee8e056dc2b2a2b16185ef436ba50a9e37a542a18271e795821168c97d750ce7ba24f8a239c3dee9c4a69a6d77ef8a1496d01d215323bc442788dcbd5e7d560655f67e1316d3bffa62950fd77edfde4fc8203a00b729e403759bdd36d6be72b565f9dc5b5d8d7151e5ce5c9435aeb63f97b77a9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r13) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r14, 0x1, 0x470bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x882}]}, 0x24}}, 0x9590f6cc3ea35512) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="100028bd7000fcdbdf255500000008000300", @ANYRES32=r15, @ANYBLOB="0c009900070000007d000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000c081) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004500003c00000000000690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001312b3e480a70800000071106c027deb3b110000"], 0x0) (async, rerun: 64) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (rerun: 64) accept4(r2, &(0x7f0000000240)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x800) splice(r4, 0x0, r3, 0x0, 0x7ffff041, 0x1200000000000000) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000080)="e1fffcf2ac83f06c03035b0f932186303a3afdb4ca4f8853493cad902288c34429ce3199109b8aaf9454ea721b08a66237ceeac69414fb83a27d1a72272bea4e4a29c09949", &(0x7f0000000140)=""/39, 0x4}, 0x20) 16.495032114s ago: executing program 3 (id=1635): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) 16.478485604s ago: executing program 4 (id=1636): r0 = socket$inet(0xa, 0x4, 0xcbdc) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdr={0x2c, 0x15, 0x121, 0x70bd26, 0x25dfdbfd, {0xa, 0x18, 0x8, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'rose0\x00', 0x2}) sendmmsg$alg(r1, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x24008000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000000a00048024000180090001006d65746100000000140002800800034000000000080002400000000509000100000000000900020073797a3200000000140000001100010000000000000000000000000a00000000"], 0x7c}}, 0x0) 16.447954683s ago: executing program 2 (id=1637): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8d}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) accept$alg(r0, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async) poll(&(0x7f0000000080)=[{r2, 0x80}], 0x1, 0x4775c454) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async, rerun: 32) close(r0) (rerun: 32) 16.345338954s ago: executing program 3 (id=1638): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000080)={0x2e7}) bind$isdn_base(r2, &(0x7f0000000040), 0x6) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0xffffffb1, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) socket(0x23, 0x80805, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000000c0)={0x1, {0x6, 0x0, 0x1, 0x5, 0x4}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000000c0)={0x1, {0x6, 0x0, 0x1, 0x5, 0x4}}) 16.071724415s ago: executing program 4 (id=1639): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdr={0x2c, 0x15, 0x121, 0x470bd26, 0x25dfdbfd, {0xa, 0x18, 0x8, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_emit_ethernet(0xe9, &(0x7f0000000200)={@broadcast, @multicast, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "f4bb", "a1d715", 0xd, "5a8b7809779a229e3eb58c15dcbc59dcc79bca8885a03420c106ed795fa3e087455aa4dbb92e1b0274bec82e831b480ec164ae2692fd2a5c4eb77eb8f9542282b7c39dd1a02f700920372de1b57a370b593c54e10cee7ca717b1e538e9c6561da6055ff140d32174cefe166cd03ca16a41702564fbab662de84ccd5dcc30c51cd23d65b1574fe9ce6ed27863c975c1a7a201534fedec182f93495542c047ee65173be97687a32b7a36902d2e35c67e9c34155760ab87d5db3163f4b69f3365f9753f52c7289f716ba5fc347175980196d0c4"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x5f0, 0xda9, 0x9e2, 0x47]}) 15.895087344s ago: executing program 3 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c000180080018"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, 0x0}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1000001}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x48}}, 0x20004804) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r2}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000003240)={0x1614, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x244, 0x8, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x13b4, 0x8, 0x0, 0x1, [{0xbdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x714, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @empty}, {0x0, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x4ac, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x869}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x8}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0xa, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x18}}}]}, {0x778, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e3a2bd45d66522de53604038f8bc4b6c7dbecd7cf1f71e976f898b03a6c35f4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe1d8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0x1614}, 0x1, 0x0, 0x0, 0xc0}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r7, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x0) 15.869518788s ago: executing program 1 (id=1641): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r1, 0x65, 0x2, 0x0, 0x20000028) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 15.663257726s ago: executing program 4 (id=1642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.662655395s ago: executing program 1 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x3, 0x1) getpeername$packet(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000030000001801000020646c2500000000002020287b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x24, 0x0, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES64=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r11], 0x50}}, 0xc0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000000c000200000000000000000004000780080001000000000043d940eb63fba10a3face0db1c79b9a378aaf5219dac667d2bec4dc7142922e8e29c3b469452de070d8514a3ba553a6ddaf6cb6546ee2495683b189d32cc7a11b5c8c1dfcafcf0b87d351c356767f807f858b75894647812367712c65adb7ecb37f6f69ca23546ca5f762173c2fc872c841853e8850d747088266d7f338f80f9ce79347f6af72d481f41ecc2a69745af59b05a9d14f922b80302550c4b1ef607f5c563c7fee2d2fb07edbaf3008b6981b3f781b1000fa3fddd742ef955dfb273020dd96e18aeac0b22ed14899aa98a8a4d63f11b255cc2ba74b1fcdcdbd6c2ddf61b6dcb187287d54da00b35c895e4ae"], 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xa2e68ba9}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000700)={r14, 0x8}, 0x8) sendto$inet6(r13, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r13, 0x29, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000360000000000000006000000190923010000d3869cf7000000001c00"], &(0x7f0000000400)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41000, 0x44, '\x00', r9, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x3, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r12], &(0x7f0000000580)=[{0x3, 0x22, 0xa, 0x8}], 0x10, 0xa9, @void, @value}, 0x94) 15.577337846s ago: executing program 4 (id=1644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001fff00000000000000003"], 0x114}], 0x1}, 0x20005000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x90}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40}, 0x30) 15.451858965s ago: executing program 3 (id=1645): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x14, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad160000400033"], 0x68}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3}, 0x6}], 0x1, 0x10140, 0x0) 15.23977926s ago: executing program 2 (id=1646): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031412e4ff02000200", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 15.207320175s ago: executing program 2 (id=1647): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000980)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket(0xb, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="5400000010000100000000000000000800000000", @ANYRES32=r9, @ANYBLOB="0000000000000000300016802c000180280001"], 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0xd1, 0x0, 0x401, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}, @fwd={0x8}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x48, 0xe2, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r10], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_crypto(0x10, 0x3, 0x15) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r6) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x60, r13, 0x0, 0x0, 0x0, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x60}}, 0x0) sendmsg$nl_crypto(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x39}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0265a62ed6a5263c630000000000017faf910000000000000000000000000000000000000000000a00000000000000c7198cf2d9d802d2f808b79458b02b8560298c3b7301aec253f4e6c78c9af29d96db5c515b3e4569e79e6cb21a27977057296a676b3a8dca6c8dac46cccba4617bd7c287afffc8c1", @ANYRES32=0x0, @ANYRESOCT=r11, @ANYRES16, @ANYRES16=r11], 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 13.436656832s ago: executing program 0 (id=1046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="e6f85e"], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) recvfrom(r0, 0x0, 0xc00, 0x2, 0x0, 0x0) 146.150082ms ago: executing program 32 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x3, 0x1) getpeername$packet(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000030000001801000020646c2500000000002020287b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x24, 0x0, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES64=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r11], 0x50}}, 0xc0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xa2e68ba9}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000700)={r14, 0x8}, 0x8) sendto$inet6(r13, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r13, 0x29, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000360000000000000006000000190923010000d3869cf7000000001c00"], &(0x7f0000000400)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41000, 0x44, '\x00', r9, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x3, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r12], &(0x7f0000000580)=[{0x3, 0x22, 0xa, 0x8}], 0x10, 0xa9, @void, @value}, 0x94) 119.533201ms ago: executing program 33 (id=1647): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000980)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket(0xb, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="5400000010000100000000000000000800000000", @ANYRES32=r9, @ANYBLOB="0000000000000000300016802c000180280001"], 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0xd1, 0x0, 0x401, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}, @fwd={0x8}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x48, 0xe2, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r10], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_crypto(0x10, 0x3, 0x15) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r6) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x60, r13, 0x0, 0x0, 0x0, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x60}}, 0x0) sendmsg$nl_crypto(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x39}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0265a62ed6a5263c630000000000017faf910000000000000000000000000000000000000000000a00000000000000c7198cf2d9d802d2f808b79458b02b8560298c3b7301aec253f4e6c78c9af29d96db5c515b3e4569e79e6cb21a27977057296a676b3a8dca6c8dac46cccba4617bd7c287afffc8c1", @ANYRES32=0x0, @ANYRESOCT=r11, @ANYRES16, @ANYRES16=r11], 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 60.974435ms ago: executing program 34 (id=1645): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x14, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r7}, 0xc) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad160000400033"], 0x68}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3}, 0x6}], 0x1, 0x10140, 0x0) 0s ago: executing program 35 (id=1644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001fff00000000000000003"], 0x114}], 0x1}, 0x20005000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x90}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40}, 0x30) kernel console output (not intermixed with test programs): active_anon:0 isolated_anon:0 [ 123.477095][ T7182] active_file:1149 inactive_file:39836 isolated_file:0 [ 123.477095][ T7182] unevictable:768 dirty:67 writeback:0 [ 123.477095][ T7182] slab_reclaimable:10172 slab_unreclaimable:99721 [ 123.477095][ T7182] mapped:29274 shmem:1368 pagetables:982 [ 123.477095][ T7182] sec_pagetables:0 bounce:0 [ 123.477095][ T7182] kernel_misc_reclaimable:0 [ 123.477095][ T7182] free:1350767 free_pcp:456 free_cma:0 [ 123.653639][ T7182] Node 0 active_anon:22900kB inactive_anon:0kB active_file:4596kB inactive_file:159140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117096kB dirty:268kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11240kB pagetables:3828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.797819][ T10] IPVS: starting estimator thread 0... [ 123.814957][ T7182] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.887134][ T7202] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.012281][ T7182] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.062194][ T7204] xt_CT: No such helper "pptp" [ 124.116850][ T7182] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 124.131156][ T7215] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 124.151913][ T7182] Node 0 DMA32 free:1468120kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:23072kB inactive_anon:0kB active_file:4596kB inactive_file:159048kB unevictable:1536kB writepending:268kB present:3129332kB managed:2564136kB mlocked:0kB bounce:0kB free_pcp:1384kB local_pcp:884kB free_cma:0kB [ 124.204254][ T7223] trusted_key: syz.4.360 sent an empty control message without MSG_MORE. [ 124.236106][ T7182] lowmem_reserve[]: 0 0 0 0 0 [ 124.249052][ T7182] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 124.335411][ T7182] lowmem_reserve[]: 0 0 0 0 0 [ 124.368835][ T7182] Node 1 Normal free:3913368kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.390649][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.363'. [ 124.410850][ T7182] lowmem_reserve[]: 0 0 0 0 0 [ 124.415811][ T7182] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.430592][ T7182] Node 0 DMA32: 243*4kB (U) 358*8kB (UE) 314*16kB (UM) 118*32kB (UME) 782*64kB (UME) 140*128kB (UME) 39*256kB (UME) 5*512kB (M) 4*1024kB (ME) 6*2048kB (ME) 333*4096kB (M) = 1473500kB [ 124.460153][ T7182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.472354][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.483893][ T7182] Node 1 Normal: 200*4kB (UE) 43*8kB (UME) 30*16kB (UME) 204*32kB (UME) 75*64kB (UME) 40*128kB (UME) 14*256kB (UM) 7*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 947*4096kB (M) = 3913368kB [ 124.503644][ T7234] set match dimension is over the limit! [ 124.507707][ T7182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.522667][ T7182] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.548841][ T7182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.568605][ T7182] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.578872][ T7182] 42350 total pagecache pages [ 124.583754][ T7182] 0 pages in swap cache [ 124.592185][ T7182] Free swap = 124996kB [ 124.596726][ T7182] Total swap = 124996kB [ 124.601133][ T7182] 2097051 pages RAM [ 124.605280][ T7182] 0 pages HighMem/MovableOnly [ 124.616397][ T7182] 424359 pages reserved [ 124.620784][ T7182] 0 pages cma reserved [ 124.855680][ T7250] netlink: 'syz.1.367': attribute type 12 has an invalid length. [ 124.897285][ T7250] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 124.919977][ T7250] netlink: 148 bytes leftover after parsing attributes in process `syz.1.367'. [ 124.972881][ T7250] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 125.030836][ T7250] netlink: 'syz.1.367': attribute type 2 has an invalid length. [ 125.430477][ T7282] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 125.731019][ T7294] veth1_macvtap: left promiscuous mode [ 125.804965][ T7294] macsec0: entered allmulticast mode [ 125.889200][ T7297] veth1_macvtap: entered promiscuous mode [ 125.924797][ T7297] veth1_macvtap: entered allmulticast mode [ 125.947034][ T7297] macsec0: left allmulticast mode [ 125.982329][ T7297] veth1_macvtap: left allmulticast mode [ 126.916713][ T7358] __nla_validate_parse: 4 callbacks suppressed [ 126.916732][ T7358] netlink: 44 bytes leftover after parsing attributes in process `syz.1.391'. [ 128.272417][ T7413] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 128.306120][ T7413] netlink: 232 bytes leftover after parsing attributes in process `syz.2.405'. [ 128.346129][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 128.682935][ T7423] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 128.702440][ T7423] bridge0: port 3(batadv0) entered disabled state [ 128.709880][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.718053][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.826864][ T5931] hid-generic 0005:0C45:0058.0001: item fetching failed at offset 0/1 [ 128.923013][ T5931] hid-generic 0005:0C45:0058.0001: probe with driver hid-generic failed with error -22 [ 129.266171][ T1121] batman_adv: batadv0: IGMP Querier appeared [ 129.272866][ T1121] batman_adv: batadv0: MLD Querier appeared [ 129.439998][ T7456] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 129.710341][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 129.840748][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 129.857413][ T7476] xt_hashlimit: max too large, truncated to 1048576 [ 130.116589][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 130.166714][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 130.458486][ T7511] netlink: 92 bytes leftover after parsing attributes in process `syz.3.428'. [ 130.631927][ T7519] netlink: 100 bytes leftover after parsing attributes in process `syz.4.431'. [ 130.672653][ T7519] sock: sock_set_timeout: `syz.4.431' (pid 7519) tries to set negative timeout [ 130.714596][ T7519] netlink: 300 bytes leftover after parsing attributes in process `syz.4.431'. [ 130.717816][ T7522] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 130.818705][ T7527] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 131.051599][ T7538] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 [ 131.689481][ T7568] bridge: RTM_NEWNEIGH with invalid ether address [ 131.941832][ T7582] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 132.027325][ T7582] pimreg: entered allmulticast mode [ 132.103767][ T7582] pimreg: left allmulticast mode [ 132.164933][ T7590] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 132.201481][ T7595] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 132.213889][ T7590] bridge0: port 3(team0) entered blocking state [ 132.225330][ T7595] __nla_validate_parse: 6 callbacks suppressed [ 132.225346][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 132.253589][ T7590] bridge0: port 3(team0) entered disabled state [ 132.283674][ T7590] team0: entered allmulticast mode [ 132.290481][ T7590] team_slave_0: entered allmulticast mode [ 132.299521][ T7590] team_slave_1: entered allmulticast mode [ 132.310076][ T7590] team0: entered promiscuous mode [ 132.315771][ T7590] team_slave_0: entered promiscuous mode [ 132.322942][ T7590] team_slave_1: entered promiscuous mode [ 132.331543][ T7590] bridge0: port 3(team0) entered blocking state [ 132.338050][ T7590] bridge0: port 3(team0) entered forwarding state [ 132.353456][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 132.433519][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 132.509128][ T7612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.464'. [ 132.531961][ T7609] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.461'. [ 132.566826][ T7609] openvswitch: netlink: Message has 5 unknown bytes. [ 132.637229][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.462'. [ 132.701473][ T7608] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 132.894839][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939099][ T7638] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.469'. [ 132.964518][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 132.974970][ T7642] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 132.989537][ T7642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.316257][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 133.429575][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 133.462093][ T5140] Bluetooth: hci4: link tx timeout [ 133.470463][ T5140] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.476382][ T7665] Cannot find add_set index 1 as target [ 133.774555][ T5833] Bluetooth: hci4: link tx timeout [ 133.780504][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.896401][ T7687] xt_TCPMSS: Only works on TCP SYN packets [ 134.596547][ T7718] team_slave_0: entered promiscuous mode [ 134.602511][ T7718] team_slave_1: entered promiscuous mode [ 134.673105][ T7718] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 134.701495][ T7718] team0: Device macvtap1 is already an upper device of the team interface [ 134.746985][ T7718] team_slave_0: left promiscuous mode [ 134.752565][ T7718] team_slave_1: left promiscuous mode [ 134.782015][ T7729] can: request_module (can-proto-5) failed. [ 134.842043][ T7731] bridge_slave_1: left allmulticast mode [ 134.866419][ T7731] bridge_slave_1: left promiscuous mode [ 134.910976][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.986263][ T7731] bridge_slave_0: left allmulticast mode [ 134.991984][ T7731] bridge_slave_0: left promiscuous mode [ 135.004287][ T7744] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 135.034376][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.159647][ T7735] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 135.205746][ T5833] Bluetooth: hci4: link tx timeout [ 135.211975][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.407018][ T7758] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 135.527428][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 135.535282][ T7760] netlink: 'syz.0.500': attribute type 8 has an invalid length. [ 135.597182][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.605664][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.615762][ T7760] bridge0: entered allmulticast mode [ 135.643761][ T7765] netlink: 'syz.3.499': attribute type 2 has an invalid length. [ 135.877576][ T7774] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 135.884424][ T7778] netlink: 'syz.2.506': attribute type 13 has an invalid length. [ 135.929481][ T7784] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 135.939311][ T7777] netlink: 'syz.1.505': attribute type 12 has an invalid length. [ 135.980163][ T7777] netlink: 'syz.1.505': attribute type 29 has an invalid length. [ 136.135944][ T5882] lo speed is unknown, defaulting to 1000 [ 136.142319][ T10] lo speed is unknown, defaulting to 1000 [ 136.817744][ T7830] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 136.829815][ T7830] team0: Device ipvlan2 is already an upper device of the team interface [ 137.695917][ T7861] netlink: 'syz.1.530': attribute type 13 has an invalid length. [ 137.709327][ T7861] __nla_validate_parse: 18 callbacks suppressed [ 137.709345][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'. [ 137.733540][ T7861] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 137.744851][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 137.942386][ T7865] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.192636][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 138.348982][ T7883] sctp: [Deprecated]: syz.3.536 (pid 7883) Use of int in max_burst socket option deprecated. [ 138.348982][ T7883] Use struct sctp_assoc_value instead [ 138.419351][ T7886] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 138.440192][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 138.970295][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 139.177794][ T7912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.545'. [ 139.218864][ T7912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.545'. [ 139.497960][ T7935] xt_cluster: node mask cannot exceed total number of nodes [ 139.804116][ T7953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 139.966307][ T7961] netlink: 128 bytes leftover after parsing attributes in process `syz.4.562'. [ 139.975582][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 140.011813][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 140.082566][ T7962] pim6reg: entered allmulticast mode [ 140.102652][ T7962] lo: entered allmulticast mode [ 140.108288][ T7962] pim6reg: left allmulticast mode [ 140.113484][ T7962] lo: left allmulticast mode [ 140.706892][ T7979] nbd0: detected capacity change from 0 to 4096 [ 140.778283][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.818362][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.848977][ T5140] block nbd0: Receive control failed (result -104) [ 140.961268][ T7990] bond4: entered promiscuous mode [ 140.983890][ T7990] bond4: entered allmulticast mode [ 140.997882][ T7990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.031823][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.032216][ T8007] openvswitch: netlink: Actions may not be safe on all matching packets [ 141.076153][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.544245][ T8020] syzkaller0: entered promiscuous mode [ 141.550714][ T8020] syzkaller0: entered allmulticast mode [ 143.003363][ T8031] tipc: Started in network mode [ 143.008745][ T8031] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 143.020060][ T8031] tipc: Enabled bearer , priority 10 [ 143.045094][ T8044] __nla_validate_parse: 6 callbacks suppressed [ 143.045114][ T8044] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.586'. [ 143.251287][ T8029] lo speed is unknown, defaulting to 1000 [ 143.317104][ T8045] lo speed is unknown, defaulting to 1000 [ 143.438218][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 143.486838][ T8061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.506941][ T8067] validate_nla: 2 callbacks suppressed [ 143.506958][ T8067] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 143.545940][ T8065] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 143.634664][ T8067] team0: Device is already in use. [ 143.698734][ T8061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.729674][ T8071] batman_adv: batadv0: Adding interface: dummy0 [ 143.740303][ T8073] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 143.748688][ T8071] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.786222][ T8071] batman_adv: batadv0: Interface activated: dummy0 [ 143.874774][ T8070] batadv0: mtu less than device minimum [ 143.882502][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.894316][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.905761][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.917752][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.929165][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.940694][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.952382][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.963977][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.975482][ T8070] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.043327][ T8061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.147926][ T10] tipc: Node number set to 4269801488 [ 144.158782][ T8061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.344989][ T8061] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.471026][ T8061] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.552655][ T8061] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.605509][ T8061] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.668572][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 144.805113][ T8104] lo speed is unknown, defaulting to 1000 [ 145.478692][ T8135] tipc: Enabling of bearer rejected, already enabled [ 145.529940][ T8134] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.856466][ T8146] syzkaller1: entered promiscuous mode [ 145.862816][ T8146] syzkaller1: entered allmulticast mode [ 146.134758][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 146.145348][ T8167] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.209974][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 146.232520][ T8170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.409314][ T8183] sctp: [Deprecated]: syz.0.626 (pid 8183) Use of int in maxseg socket option. [ 146.409314][ T8183] Use struct sctp_assoc_value instead [ 146.431193][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 146.447449][ T8181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.625'. [ 146.522717][ T8192] netlink: 'syz.2.627': attribute type 7 has an invalid length. [ 147.170449][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 147.199836][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 147.305659][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 147.704794][ T8249] netlink: 'syz.3.645': attribute type 29 has an invalid length. [ 148.653410][ T8291] __nla_validate_parse: 1 callbacks suppressed [ 148.653431][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 148.687847][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.658'. [ 148.843117][ T8298] netlink: 'syz.1.660': attribute type 4 has an invalid length. [ 148.885048][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 149.044137][ T8313] netlink: 240 bytes leftover after parsing attributes in process `syz.3.662'. [ 149.048502][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 149.608269][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 149.640214][ T8340] batadv0: entered allmulticast mode [ 149.760497][ T8345] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.882307][ T8309] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.888961][ T8310] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.929671][ T8350] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.675'. [ 150.023510][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 150.195937][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 150.260713][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 150.397826][ T8371] sctp: [Deprecated]: syz.3.678 (pid 8371) Use of int in maxseg socket option. [ 150.397826][ T8371] Use struct sctp_assoc_value instead [ 150.905799][ T8394] tipc: Enabling of bearer rejected, failed to enable media [ 151.126295][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 151.158632][ T8410] net_ratelimit: 19 callbacks suppressed [ 151.158652][ T8410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.183673][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803004e800: rx timeout, send abort [ 151.623319][ T8428] ip6gre1: entered allmulticast mode [ 151.684092][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4bec00: rx timeout, send abort [ 151.692877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803004e800: abort rx timeout. Force session deactivation [ 151.727404][ T8430] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 151.774893][ T8438] tipc: Enabled bearer , priority 0 [ 151.787066][ T8430] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.790496][ T8437] tipc: Enabling of bearer rejected, already enabled [ 151.829124][ T8438] syzkaller0: entered promiscuous mode [ 151.840408][ T8438] syzkaller0: entered allmulticast mode [ 151.902035][ T8438] tipc: Resetting bearer [ 151.912652][ T8437] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 151.973619][ T8437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.028616][ T8437] bond2: (slave gretap1): making interface the new active one [ 152.039119][ T8437] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 152.063882][ T8451] batadv0: Device is already in use. [ 152.078627][ T8437] bond2: entered allmulticast mode [ 152.118106][ T8437] gretap1: entered allmulticast mode [ 152.186968][ T8462] macvlan0: left promiscuous mode [ 152.192084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4be800: rx timeout, send abort [ 152.200810][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4bec00: abort rx timeout. Force session deactivation [ 152.244591][ T8462] macvlan0: left allmulticast mode [ 152.262231][ T8462] veth1_vlan: left allmulticast mode [ 152.274511][ T8434] tipc: Resetting bearer [ 152.292768][ T8434] tipc: Disabling bearer [ 152.339797][ T8437] syz.1.699 (8437) used greatest stack depth: 19040 bytes left [ 152.629882][ T5882] IPVS: starting estimator thread 0... [ 152.635699][ T8476] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.692160][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b4be800: abort rx timeout. Force session deactivation [ 152.757099][ T8486] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.873637][ T8494] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 152.944823][ T8499] xt_socket: unknown flags 0x3c [ 152.953596][ T8499] xt_socket: unknown flags 0x3c [ 153.192555][ T8514] xt_l2tp: unknown flags: 18 [ 153.206793][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 153.532091][ T8530] IPVS: length: 8 != 1152 [ 153.674919][ T8538] tap0: tun_chr_ioctl cmd 1074025676 [ 153.688033][ T8538] tap0: owner set to 0 [ 153.702066][ T8538] netlink: 'syz.1.729': attribute type 4 has an invalid length. [ 153.957234][ T8552] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 153.971179][ T8552] __nla_validate_parse: 12 callbacks suppressed [ 153.971196][ T8552] netlink: 228 bytes leftover after parsing attributes in process `syz.4.733'. [ 154.024386][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 154.095856][ T8554] bridge0: port 3(team0) entered disabled state [ 154.102569][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.110354][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.311924][ T8567] lo speed is unknown, defaulting to 1000 [ 154.374034][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 154.594887][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 154.608829][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 154.784207][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 154.797386][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 154.870032][ T8592] netlink: zone id is out of range [ 154.891601][ T8592] netlink: zone id is out of range [ 154.904751][ T8592] netlink: zone id is out of range [ 154.924211][ T8592] netlink: zone id is out of range [ 154.943519][ T8592] netlink: zone id is out of range [ 154.955189][ T8592] netlink: zone id is out of range [ 154.974795][ T8592] netlink: zone id is out of range [ 154.993558][ T8592] netlink: zone id is out of range [ 155.134162][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 155.158758][ T8607] can: request_module (can-proto-4) failed. [ 155.434012][ T8609] team0: Port device team_slave_0 removed [ 155.787566][ T8633] raw_sendmsg: syz.0.754 forgot to set AF_INET. Fix it! [ 155.791171][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.755'. [ 155.867380][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.755'. [ 156.215712][ T8649] xt_CT: No such helper "pptp" [ 156.478984][ T8674] tipc: Trying to set illegal importance in message [ 156.721628][ T8685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.728968][ T8685] IPv6: NLM_F_CREATE should be set when creating new route [ 156.832761][ T8695] block nbd4: not configured, cannot reconfigure [ 158.249904][ T8755] team0 (unregistering): Port device team_slave_0 removed [ 158.320323][ T8755] team0 (unregistering): Port device team_slave_1 removed [ 159.173027][ T8821] __nla_validate_parse: 7 callbacks suppressed [ 159.173047][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 159.813142][ T8861] tipc: Can't bind to reserved service type 0 [ 159.837305][ T8860] net_ratelimit: 396 callbacks suppressed [ 159.837323][ T8860] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 159.854883][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 159.874428][ T8860] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 159.878225][ T8855] netlink: 256 bytes leftover after parsing attributes in process `syz.4.816'. [ 159.893556][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 160.495538][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 160.804236][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.829'. [ 160.855910][ T8917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.921404][ T8921] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 161.083334][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 161.264061][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 161.282881][ T8943] lo: entered promiscuous mode [ 161.315127][ T8941] netlink: 'syz.0.837': attribute type 7 has an invalid length. [ 161.323443][ T8943] lo: entered allmulticast mode [ 161.371592][ T8941] netlink: 'syz.0.837': attribute type 8 has an invalid length. [ 161.400550][ T8943] tunl0: entered promiscuous mode [ 161.415192][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 161.429423][ T8943] tunl0: entered allmulticast mode [ 161.435482][ T8943] gre0: entered promiscuous mode [ 161.444388][ T8943] gre0: entered allmulticast mode [ 161.453977][ T8943] gretap0: entered promiscuous mode [ 161.460560][ T8943] gretap0: entered allmulticast mode [ 161.467199][ T8943] erspan0: entered promiscuous mode [ 161.472557][ T8943] erspan0: entered allmulticast mode [ 161.482248][ T8943] ip_vti0: entered promiscuous mode [ 161.488280][ T8943] ip_vti0: entered allmulticast mode [ 161.495619][ T8943] ip6_vti0: entered promiscuous mode [ 161.502237][ T8943] ip6_vti0: entered allmulticast mode [ 161.514928][ T8943] sit0: entered promiscuous mode [ 161.520397][ T8943] sit0: entered allmulticast mode [ 161.531987][ T8943] ip6tnl0: entered promiscuous mode [ 161.537315][ T8943] ip6tnl0: entered allmulticast mode [ 161.543206][ T8943] ip6gre0: entered promiscuous mode [ 161.551668][ T8943] ip6gre0: entered allmulticast mode [ 161.558430][ T8943] syz_tun: entered promiscuous mode [ 161.563679][ T8943] syz_tun: entered allmulticast mode [ 161.570596][ T8943] ip6gretap0: entered promiscuous mode [ 161.576958][ T8943] ip6gretap0: entered allmulticast mode [ 161.583640][ T8943] bridge0: entered promiscuous mode [ 161.589359][ T8943] bridge0: entered allmulticast mode [ 161.595885][ T8943] vcan0: entered promiscuous mode [ 161.601756][ T8943] vcan0: entered allmulticast mode [ 161.608054][ T8943] bond0: entered promiscuous mode [ 161.613129][ T8943] bond_slave_0: entered promiscuous mode [ 161.621524][ T8943] bond_slave_1: entered promiscuous mode [ 161.633207][ T8943] bond0: entered allmulticast mode [ 161.640012][ T8943] bond_slave_0: entered allmulticast mode [ 161.646997][ T8943] bond_slave_1: entered allmulticast mode [ 161.654196][ T8943] team0: entered promiscuous mode [ 161.663763][ T8943] team_slave_0: entered promiscuous mode [ 161.671413][ T8943] team_slave_1: entered promiscuous mode [ 161.682447][ T8943] team0: entered allmulticast mode [ 161.692908][ T8943] team_slave_0: entered allmulticast mode [ 161.699932][ T8943] team_slave_1: entered allmulticast mode [ 161.707636][ T8943] dummy0: entered promiscuous mode [ 161.712997][ T8943] dummy0: entered allmulticast mode [ 161.719217][ T8943] nlmon0: entered promiscuous mode [ 161.724385][ T8943] nlmon0: entered allmulticast mode [ 161.730980][ T8943] caif0: entered promiscuous mode [ 161.739993][ T8943] caif0: entered allmulticast mode [ 161.745153][ T8943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.083739][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'. [ 162.149004][ T8971] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 162.162708][ T8977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.166457][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 162.595699][ T8997] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:04:00:85 [ 163.500885][ T9045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.845607][ T9060] __nla_validate_parse: 8 callbacks suppressed [ 164.845628][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.868'. [ 165.097029][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 165.129565][ T9067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.870'. [ 165.240612][ T9078] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 165.338205][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 165.401641][ T9081] netlink: zone id is out of range [ 165.432880][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 165.488112][ T9081] netlink: zone id is out of range [ 165.511523][ T9081] netlink: zone id is out of range [ 165.542047][ T9081] netlink: zone id is out of range [ 165.551102][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 165.582502][ T9081] netlink: zone id is out of range [ 165.617594][ T9081] netlink: zone id is out of range [ 165.637440][ T9081] netlink: zone id is out of range [ 165.651017][ T9081] netlink: zone id is out of range [ 165.670084][ T9081] netlink: zone id is out of range [ 165.684796][ T9081] netlink: zone id is out of range [ 166.701966][ T9120] netlink: 404 bytes leftover after parsing attributes in process `syz.3.885'. [ 166.762983][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 166.833555][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 166.875767][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.885'. [ 167.042459][ T9129] nbd: couldn't find a device at index 16056320 [ 167.439208][ T9129] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.779998][ T9144] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 168.382843][ T9176] .: renamed from bond0 (while UP) [ 168.445331][ T9180] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 168.465769][ T9180] syzkaller0: linktype set to 768 [ 168.611696][ T9189] team0: entered promiscuous mode [ 168.617137][ T9189] team_slave_1: entered promiscuous mode [ 168.624997][ T9189] batadv_slave_1: entered promiscuous mode [ 170.122812][ T9225] __nla_validate_parse: 4 callbacks suppressed [ 170.122832][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 170.238594][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.917'. [ 170.342242][ T9233] sctp: [Deprecated]: syz.4.921 (pid 9233) Use of int in max_burst socket option deprecated. [ 170.342242][ T9233] Use struct sctp_assoc_value instead [ 170.718718][ T9260] netlink: 80 bytes leftover after parsing attributes in process `syz.3.929'. [ 170.801886][ T9255] veth0: entered promiscuous mode [ 170.824500][ T9259] team0: Device vti0 is of different type [ 170.873457][ T9263] veth0: entered promiscuous mode [ 170.885253][ T9255] veth0: left promiscuous mode [ 170.934773][ T9261] veth0: left promiscuous mode [ 171.092888][ T9273] netlink: 100 bytes leftover after parsing attributes in process `syz.2.935'. [ 171.113557][ T9273] net_ratelimit: 4 callbacks suppressed [ 171.113575][ T9273] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.145064][ T9277] IPVS: length: 8 != 1152 [ 171.169494][ T9281] netlink: 788 bytes leftover after parsing attributes in process `syz.1.936'. [ 171.290072][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 30 seconds [ 171.324052][ T9278] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 171.332363][ T9278] netlink: 224 bytes leftover after parsing attributes in process `syz.4.937'. [ 171.722585][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 171.982722][ T9317] netlink: 'syz.0.946': attribute type 6 has an invalid length. [ 172.132395][ T9324] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 172.169590][ T9328] netlink: 'syz.4.950': attribute type 39 has an invalid length. [ 172.526073][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.957'. [ 172.543736][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.957'. [ 172.794044][ T9371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.075815][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'. [ 173.384151][ T9398] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20004 [ 173.721793][ T9419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 174.138422][ T9434] team0: left allmulticast mode [ 174.149916][ T9434] team_slave_0: left allmulticast mode [ 174.158824][ T9434] team_slave_1: left allmulticast mode [ 174.170520][ T9434] team0: left promiscuous mode [ 174.175412][ T9434] team_slave_0: left promiscuous mode [ 174.195922][ T9434] team_slave_1: left promiscuous mode [ 174.214242][ T9434] bridge0: port 3(team0) entered disabled state [ 174.262360][ T9434] bridge_slave_1: left allmulticast mode [ 174.287554][ T9434] bridge_slave_1: left promiscuous mode [ 174.296383][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.321726][ T9434] bridge_slave_0: left allmulticast mode [ 174.330890][ T9434] bridge_slave_0: left promiscuous mode [ 174.340463][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.676221][ T9464] vti0: entered promiscuous mode [ 174.984073][ T9486] xt_SECMARK: invalid mode: 0 [ 175.347073][ T9502] vlan0: entered promiscuous mode [ 175.628405][ T9518] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 175.658426][ T9518] __nla_validate_parse: 6 callbacks suppressed [ 175.658445][ T9518] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.718424][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 175.929133][ T9531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.962977][ T9532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.065036][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 176.080489][ T9537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.344345][ T9555] openvswitch: netlink: IP tunnel TTL not specified. [ 176.550310][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 176.560047][ T9570] netlink: 'syz.0.1020': attribute type 29 has an invalid length. [ 176.568806][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 176.610550][ T9569] netlink: 'syz.0.1020': attribute type 29 has an invalid length. [ 176.644066][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 176.768590][ T9574] netlink: 'syz.2.1023': attribute type 21 has an invalid length. [ 176.949209][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 177.083821][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 177.202812][ T9595] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 177.352542][ T9607] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 177.658153][ T9622] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1038'. [ 177.874371][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 177.977204][ T9639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.154459][ T1334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.247770][ T1334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.365285][ T1334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.488761][ T1334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.013851][ T9666] netlink: 'syz.3.1050': attribute type 3 has an invalid length. [ 179.087026][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.098184][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.106070][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.120403][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.148159][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.276895][ T1334] bridge_slave_1: left allmulticast mode [ 179.282871][ T1334] bridge_slave_1: left promiscuous mode [ 179.287331][ T9684] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.346883][ T1334] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.399896][ T1334] bridge_slave_0: left allmulticast mode [ 179.414203][ T1334] bridge_slave_0: left promiscuous mode [ 179.431696][ T1334] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.019542][ T1334] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.032360][ T1334] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.042924][ T1334] . (unregistering): Released all slaves [ 180.132410][ T1334] bond1 (unregistering): Released all slaves [ 180.146885][ T1334] bond0 (unregistering): Released all slaves [ 180.172636][ T9676] lo speed is unknown, defaulting to 1000 [ 180.461363][ T9693] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 180.705525][ T9704] bond2: entered promiscuous mode [ 180.711804][ T9704] bond2: entered allmulticast mode [ 180.717810][ T9704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.827798][ T9704] bond2 (unregistering): Released all slaves [ 180.878791][ T9711] __nla_validate_parse: 7 callbacks suppressed [ 180.878809][ T9711] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1063'. [ 180.905548][ T9717] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1060'. [ 180.922161][ T9716] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 181.597587][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 182.021445][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 182.155323][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.195579][ T1334] hsr_slave_0: left promiscuous mode [ 182.210679][ T1334] hsr_slave_1: left promiscuous mode [ 182.222068][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.231328][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.252713][ T1334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.261167][ T1334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.283281][ T1334] veth1_macvtap: left promiscuous mode [ 182.289486][ T1334] veth0_macvtap: left promiscuous mode [ 182.295325][ T1334] veth1_vlan: left promiscuous mode [ 182.301629][ T1334] veth0_vlan: left promiscuous mode [ 182.961116][ T1334] team0 (unregistering): Port device team_slave_1 removed [ 183.000869][ T1334] team0 (unregistering): Port device team_slave_0 removed [ 183.420851][ T5882] lo speed is unknown, defaulting to 1000 [ 183.436486][ T5882] syz2: Port: 1 Link DOWN [ 183.585236][ T9800] veth1_macvtap: left promiscuous mode [ 183.592600][ T9800] macsec0: entered promiscuous mode [ 183.616840][ T9803] veth1_macvtap: entered promiscuous mode [ 183.622818][ T9803] macsec0: left promiscuous mode [ 183.691370][ T9810] tipc: Enabling of bearer rejected, failed to enable media [ 183.719399][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.733807][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.772759][ T9676] bridge_slave_0: entered allmulticast mode [ 183.788246][ T9676] bridge_slave_0: entered promiscuous mode [ 183.808887][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.825047][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.841802][ T9676] bridge_slave_1: entered allmulticast mode [ 183.850979][ T9676] bridge_slave_1: entered promiscuous mode [ 183.961621][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.989551][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.047184][ T9819] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.168392][ T9676] team0: Port device team_slave_0 added [ 184.181253][ T9819] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.183805][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 184.204687][ T1334] IPVS: stop unused estimator thread 0... [ 184.252629][ T9676] team0: Port device team_slave_1 added [ 184.297951][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 184.314318][ T9819] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.349437][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 184.363820][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.377263][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.403863][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.444920][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.471903][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.514899][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.543460][ T9819] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.615068][ T9841] netlink: 'syz.4.1095': attribute type 3 has an invalid length. [ 184.765255][ T9847] netlink: 'syz.4.1098': attribute type 2 has an invalid length. [ 184.834390][ T9676] hsr_slave_0: entered promiscuous mode [ 184.845613][ T9853] x_tables: duplicate underflow at hook 3 [ 184.847377][ T9676] hsr_slave_1: entered promiscuous mode [ 184.900581][ T9676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.921197][ T9676] Cannot create hsr debugfs directory [ 184.964417][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 185.015570][ T9819] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.050412][ T9819] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.074646][ T9855] pim6reg527: entered allmulticast mode [ 185.110193][ T9855] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.151912][ T9819] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.198277][ T9819] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.303823][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 185.439469][ T9878] Bluetooth: MGMT ver 1.23 [ 185.716689][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'. [ 186.056715][ T9904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1114'. [ 186.072971][ T9904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1114'. [ 186.311520][ T9676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.383383][ T9676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.420890][ T9676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.479287][ T9920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.500847][ T9676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.673742][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'. [ 186.863413][ T9933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1126'. [ 186.890155][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.949194][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.980717][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.987969][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.059385][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.066644][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.200285][ T9935] netlink: 'syz.2.1127': attribute type 4 has an invalid length. [ 187.225590][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1127'. [ 187.420012][ T9945] x_tables: duplicate underflow at hook 1 [ 187.621822][ T9956] netlink: 'syz.4.1134': attribute type 19 has an invalid length. [ 187.630711][ T9954] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1135'. [ 187.927266][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1138'. [ 187.964305][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.992548][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'. [ 188.026807][ T9966] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1138'. [ 188.042650][ T9972] team0: entered promiscuous mode [ 188.048311][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 188.059297][ T9966] netlink: 'syz.3.1138': attribute type 3 has an invalid length. [ 188.068458][ T9972] team_slave_0: entered promiscuous mode [ 188.080885][ T9966] netlink: 'syz.3.1138': attribute type 2 has an invalid length. [ 188.089587][ T9972] team_slave_1: entered promiscuous mode [ 188.097665][ T9972] batadv_slave_1: entered promiscuous mode [ 188.105068][ T9972] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 188.124197][ T9972] Cannot create hsr debugfs directory [ 188.289639][ T9676] veth0_vlan: entered promiscuous mode [ 188.353853][ T9676] veth1_vlan: entered promiscuous mode [ 188.415701][ T9676] veth0_macvtap: entered promiscuous mode [ 188.422010][ T9989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.485626][ T9676] veth1_macvtap: entered promiscuous mode [ 188.541708][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.580446][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.634041][ T9676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.660479][ T9676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.679995][ T9676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.688931][ T9676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.026596][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.038611][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.186465][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.194371][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.361771][T10027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.425298][T10030] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.692178][T10037] team_slave_0: left promiscuous mode [ 189.698375][T10037] team_slave_0: left allmulticast mode [ 189.716848][T10037] team0 (unregistering): Port device team_slave_0 removed [ 189.724641][T10037] team_slave_1: left promiscuous mode [ 189.732537][T10037] team_slave_1: left allmulticast mode [ 189.749341][T10037] team0 (unregistering): Port device team_slave_1 removed [ 189.861248][T10044] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 190.005413][T10047] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 190.382776][T10056] netlink: 'syz.2.1167': attribute type 24 has an invalid length. [ 190.524480][T10058] can: request_module (can-proto-5) failed. [ 190.812038][T10076] netlink: zone id is out of range [ 190.819593][T10076] netlink: zone id is out of range [ 190.825405][T10076] netlink: zone id is out of range [ 190.831264][T10076] netlink: zone id is out of range [ 190.849731][T10076] netlink: zone id is out of range [ 190.855005][T10076] netlink: zone id is out of range [ 190.896375][T10076] netlink: zone id is out of range [ 190.906242][T10076] netlink: zone id is out of range [ 190.926208][T10076] netlink: zone id is out of range [ 190.931486][T10076] netlink: zone id is out of range [ 191.089030][T10084] __nla_validate_parse: 14 callbacks suppressed [ 191.089051][T10084] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1177'. [ 191.205830][T10095] sctp: [Deprecated]: syz.2.1180 (pid 10095) Use of int in maxseg socket option. [ 191.205830][T10095] Use struct sctp_assoc_value instead [ 191.290285][T10099] netlink: 810 bytes leftover after parsing attributes in process `syz.1.1183'. [ 191.484182][T10109] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 191.539221][T10112] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1186'. [ 191.570018][T10112] syzkaller1: entered promiscuous mode [ 191.575794][T10112] syzkaller1: entered allmulticast mode [ 191.646680][T10112] xt_CT: No such helper "pptp" [ 191.821440][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.827759][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.834454][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.854450][T10123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 191.889244][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.898053][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.909952][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.921028][T10123] wg0 speed is unknown, defaulting to 1000 [ 191.933685][T10123] wg0 speed is unknown, defaulting to 1000 [ 192.299227][T10138] x_tables: duplicate underflow at hook 3 [ 192.334657][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 192.348461][T10140] netlink: 'syz.1.1194': attribute type 5 has an invalid length. [ 192.409473][T10140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 192.450772][T10140] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 192.475642][T10148] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 192.482547][T10140] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 192.488334][T10148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1196'. [ 192.510511][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 192.516092][T10140] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 192.556211][T10140] geneve2: entered promiscuous mode [ 192.571715][T10140] geneve2: entered allmulticast mode [ 193.361404][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 193.371799][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'. [ 193.445352][T10188] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1205'. [ 193.970526][T10213] tipc: Enabling of bearer rejected, failed to enable media [ 194.012100][T10211] wg0 speed is unknown, defaulting to 1000 [ 194.527512][T10243] netlink: 'syz.1.1220': attribute type 4 has an invalid length. [ 194.598802][T10243] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 194.775652][T10243] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 194.814825][T10243] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 195.361338][T10291] netlink: 'syz.2.1229': attribute type 24 has an invalid length. [ 195.489039][T10299] batadv_slave_1: entered promiscuous mode [ 195.505442][T10299] bridge0: port 3(batadv0) entered blocking state [ 195.512160][T10299] bridge0: port 3(batadv0) entered forwarding state [ 195.519144][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.526362][T10299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.533786][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.540998][T10299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.604005][T10299] batadv_slave_1: left promiscuous mode [ 195.934636][T10312] xt_CT: No such helper "pptp" [ 195.981465][T10322] tipc: Enabling of bearer rejected, already enabled [ 196.336970][T10339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.495190][T10349] __nla_validate_parse: 9 callbacks suppressed [ 196.495209][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 196.638218][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 197.040586][T10384] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 197.078166][T10384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.088072][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 197.226485][T10390] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 197.353086][T10393] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 197.473520][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 197.658879][T10406] wg0 speed is unknown, defaulting to 1000 [ 198.221300][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 198.293535][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 198.502733][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1275'. [ 198.683786][T10452] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 198.759032][T10454] netlink: 'syz.2.1279': attribute type 11 has an invalid length. [ 198.788283][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 199.005041][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1284'. [ 199.032596][T10468] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1286'. [ 199.049063][T10470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.117648][T10473] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 200.392338][T10505] delete_channel: no stack [ 200.519486][T10508] pim6reg1: entered promiscuous mode [ 200.524869][T10508] pim6reg1: entered allmulticast mode [ 200.680372][T10521] pimreg: entered allmulticast mode [ 200.926646][T10531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.060955][T10538] bond0: entered allmulticast mode [ 201.109154][T10538] @ÿ: entered allmulticast mode [ 201.137029][T10538] bond_slave_1: entered allmulticast mode [ 201.154844][T10538] macvlan0: entered allmulticast mode [ 201.189449][T10538] veth1_vlan: entered allmulticast mode [ 201.208248][T10539] tipc: Enabling of bearer rejected, failed to enable media [ 201.381908][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 60 seconds [ 201.459987][T10552] gtp0: entered promiscuous mode [ 201.465295][T10552] gtp0: entered allmulticast mode [ 201.544300][T10561] __nla_validate_parse: 8 callbacks suppressed [ 201.544319][T10561] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1313'. [ 201.835844][T10572] net_ratelimit: 16 callbacks suppressed [ 201.835865][T10572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.862543][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 201.878909][T10572] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1318'. [ 202.072445][T10589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1322'. [ 202.274633][T10598] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 202.407184][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 202.481285][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 202.517741][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 202.534217][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 202.625770][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 202.850973][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'. [ 203.314630][T10659] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 203.531573][T10668] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 204.081347][T10700] netlink: 'syz.2.1351': attribute type 2 has an invalid length. [ 204.314386][T10714] tipc: Started in network mode [ 204.322697][T10714] tipc: Node identity 6, cluster identity 4711 [ 204.333438][T10714] tipc: Node number set to 6 [ 204.365502][T10714] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 205.829762][T10766] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 205.852794][T10766] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 205.886355][T10770] tap0: tun_chr_ioctl cmd 35314 [ 205.989529][T10780] vlan0: entered allmulticast mode [ 205.994967][T10780] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 206.264216][T10799] netlink: 'syz.3.1380': attribute type 6 has an invalid length. [ 206.285494][T10800] netlink: 'syz.3.1380': attribute type 3 has an invalid length. [ 206.317637][T10799] netlink: 'syz.3.1380': attribute type 3 has an invalid length. [ 206.815232][T10837] __nla_validate_parse: 17 callbacks suppressed [ 206.815261][T10837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1391'. [ 206.881436][T10839] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.372093][T10870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1401'. [ 207.497399][T10876] netlink: zone id is out of range [ 207.668680][T10887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1404'. [ 207.724328][T10879] netlink: 'syz.4.1403': attribute type 5 has an invalid length. [ 207.763752][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 208.065024][T10903] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1408'. [ 208.114243][T10903] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 208.205051][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1410'. [ 208.235224][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 208.322535][T10916] block nbd2: not configured, cannot reconfigure [ 208.395862][T10923] netlink: 'syz.1.1413': attribute type 9 has an invalid length. [ 208.434427][T10924] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 208.442581][T10924] netlink: 'syz.3.1414': attribute type 4 has an invalid length. [ 208.456132][T10924] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.1414'. [ 208.585905][T10930] xt_connbytes: Forcing CT accounting to be enabled [ 208.599117][T10930] --map-set only usable from mangle table [ 208.650975][T10934] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 208.776411][T10942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 208.809694][T10944] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1421'. [ 209.436846][T10978] veth0: entered promiscuous mode [ 209.672851][T10977] veth0: left promiscuous mode [ 210.328626][T11008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.361544][T11008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.396840][T11008] bond0 (unregistering): Released all slaves [ 210.617775][T11014] syzkaller0: entered promiscuous mode [ 210.623359][T11014] syzkaller0: entered allmulticast mode [ 211.771501][T10997] Bluetooth: hci1: command 0x0406 tx timeout [ 211.772845][T10995] Bluetooth: hci2: command 0x0406 tx timeout [ 211.780565][T10997] Bluetooth: hci3: command 0x0406 tx timeout [ 212.211092][T11046] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 1, id = 0 [ 212.379609][T11049] validate_nla: 2 callbacks suppressed [ 212.379629][T11049] netlink: 'syz.3.1448': attribute type 64 has an invalid length. [ 212.393357][T11049] __nla_validate_parse: 5 callbacks suppressed [ 212.393373][T11049] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1448'. [ 212.552959][T11061] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1453'. [ 212.565040][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 212.835910][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 212.870364][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 212.892650][T11075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.899983][T11075] IPv6: NLM_F_CREATE should be set when creating new route [ 213.002242][T11078] xt_hashlimit: size too large, truncated to 1048576 [ 213.927478][T11117] No such timeout policy "syz0" [ 214.264647][T11140] netlink: 810 bytes leftover after parsing attributes in process `syz.4.1473'. [ 214.542184][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'. [ 214.945514][T11172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.100670][T11186] netlink: 2144 bytes leftover after parsing attributes in process `syz.1.1483'. [ 215.137140][T11189] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 215.794108][T11231] sctp: [Deprecated]: syz.2.1499 (pid 11231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.794108][T11231] Use struct sctp_sack_info instead [ 215.827835][T11231] sctp: [Deprecated]: syz.2.1499 (pid 11231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.827835][T11231] Use struct sctp_sack_info instead [ 215.889414][T11237] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1500'. [ 216.293632][T11257] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1503'. [ 216.738665][T11287] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 218.641796][T11322] __nla_validate_parse: 2 callbacks suppressed [ 218.641817][T11322] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1524'. [ 218.680040][T11322] sctp: [Deprecated]: syz.2.1524 (pid 11322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.680040][T11322] Use struct sctp_sack_info instead [ 218.683561][T11324] netlink: 'syz.1.1523': attribute type 28 has an invalid length. [ 218.698829][T11322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.732703][T11324] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 218.742197][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1523'. [ 218.782657][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1523'. [ 218.890294][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 218.922604][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 219.768029][T11378] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 219.902622][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 220.134965][T11404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1543'. [ 220.402763][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1547'. [ 220.531150][T11428] veth0: entered promiscuous mode [ 220.538450][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 220.923444][T11447] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 220.941710][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 221.470555][T11478] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 221.871518][T11493] netlink: 'syz.4.1566': attribute type 39 has an invalid length. [ 221.889942][T11493] veth0_macvtap: left promiscuous mode [ 222.277272][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.415761][T11520] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 223.665412][T11586] __nla_validate_parse: 8 callbacks suppressed [ 223.665432][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 223.692511][T11586] xt_hashlimit: size too large, truncated to 1048576 [ 223.745796][T11583] xt_hashlimit: size too large, truncated to 1048576 [ 224.172598][T11607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.190240][T11603] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 224.198400][T11603] netlink: 'syz.2.1603': attribute type 3 has an invalid length. [ 224.206334][T11603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1603'. [ 224.217404][T11607] batadv_slave_1: entered allmulticast mode [ 224.395201][T11617] SET target dimension over the limit! [ 224.571089][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1611'. [ 224.589561][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 224.635409][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 224.697382][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 224.762002][T11638] batman_adv: batadv0: Interface deactivated: dummy0 [ 224.769283][T11638] batman_adv: batadv0: Removing interface: dummy0 [ 224.793908][T11638] bridge_slave_0: left allmulticast mode [ 224.823002][T11638] bridge_slave_0: left promiscuous mode [ 224.846421][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.915691][T11638] bridge_slave_1: left allmulticast mode [ 224.936192][T11638] bridge_slave_1: left promiscuous mode [ 224.942292][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.972852][T11638] bond0: (slave bond_slave_0): Releasing backup interface [ 224.988194][T11638] bond_slave_0: left promiscuous mode [ 225.006789][T11638] bond_slave_0: left allmulticast mode [ 225.018828][T11643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1614'. [ 225.036545][T11638] bond0: (slave bond_slave_1): Releasing backup interface [ 225.061551][T11638] bond_slave_1: left promiscuous mode [ 225.076913][T11638] bond_slave_1: left allmulticast mode [ 225.098051][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.105765][T11638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.138641][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.146196][T11638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.176906][T11638] bond0: (slave netdevsim0): Releasing backup interface [ 225.203914][T11638] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 225.225670][T11638] bond2: (slave gretap1): Releasing active interface [ 225.233807][T11638] gretap1: left allmulticast mode [ 225.252367][ T10] wg0 speed is unknown, defaulting to 1000 [ 225.381898][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 225.500583][T11656] unknown channel width for channel at 909000KHz? [ 225.651489][T11664] macsec0: mtu greater than device maximum [ 225.733790][T11666] netlink: 'syz.3.1620': attribute type 39 has an invalid length. [ 225.873218][T11676] netlink: 'syz.2.1623': attribute type 11 has an invalid length. [ 225.906204][T11677] xt_policy: output policy not valid in PREROUTING and INPUT [ 225.952869][T11679] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1622'. [ 226.317612][T11702] netlink: 'syz.4.1631': attribute type 11 has an invalid length. [ 226.343528][T11702] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1631'. [ 226.810963][T11727] syz.2.1637: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 226.838819][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.2.1637 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 226.838862][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.838877][T11727] Call Trace: [ 226.838885][T11727] [ 226.838894][T11727] dump_stack_lvl+0x189/0x250 [ 226.838934][T11727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.838963][T11727] ? __pfx__printk+0x10/0x10 [ 226.838984][T11727] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.839017][T11727] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.839051][T11727] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 226.839087][T11727] warn_alloc+0x214/0x310 [ 226.839124][T11727] ? __pfx_warn_alloc+0x10/0x10 [ 226.839163][T11727] ? __get_vm_area_node+0x1c5/0x2d0 [ 226.839189][T11727] ? __get_vm_area_node+0x25a/0x2d0 [ 226.839222][T11727] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 226.839282][T11727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.839313][T11727] ? alloc_pages_mpol+0x3cd/0x4a0 [ 226.839343][T11727] ? packet_set_ring+0x6f4/0x2380 [ 226.839367][T11727] vzalloc_noprof+0x79/0x90 [ 226.839393][T11727] ? packet_set_ring+0x6f4/0x2380 [ 226.839416][T11727] packet_set_ring+0x6f4/0x2380 [ 226.839463][T11727] ? __pfx_packet_set_ring+0x10/0x10 [ 226.839508][T11727] ? _copy_from_user+0x94/0xb0 [ 226.839540][T11727] packet_setsockopt+0xc5a/0x12c0 [ 226.839567][T11727] ? __pfx_packet_setsockopt+0x10/0x10 [ 226.839591][T11727] ? futex_wait+0x285/0x360 [ 226.839637][T11727] ? aa_sk_perm+0x81e/0x950 [ 226.839658][T11727] ? file_init_path+0x3b/0x590 [ 226.839686][T11727] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.839711][T11727] ? aa_sock_opt_perm+0x74/0x110 [ 226.839735][T11727] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 226.839757][T11727] ? __pfx_packet_setsockopt+0x10/0x10 [ 226.839782][T11727] do_sock_setsockopt+0x257/0x3e0 [ 226.839811][T11727] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 226.839833][T11727] ? __fget_files+0x2a/0x420 [ 226.839865][T11727] ? __fget_files+0x3a0/0x420 [ 226.839889][T11727] ? __fget_files+0x2a/0x420 [ 226.839923][T11727] __x64_sys_setsockopt+0x18b/0x220 [ 226.839955][T11727] do_syscall_64+0xf6/0x210 [ 226.839981][T11727] ? clear_bhb_loop+0x45/0xa0 [ 226.840006][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.840024][T11727] RIP: 0033:0x7f138d38e969 [ 226.840042][T11727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.840058][T11727] RSP: 002b:00007f138e1f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 226.840078][T11727] RAX: ffffffffffffffda RBX: 00007f138d5b5fa0 RCX: 00007f138d38e969 [ 226.840091][T11727] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 226.840103][T11727] RBP: 00007f138d410ab1 R08: 000000000000001c R09: 0000000000000000 [ 226.840115][T11727] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 226.840126][T11727] R13: 0000000000000000 R14: 00007f138d5b5fa0 R15: 00007ffcecd14058 [ 226.840156][T11727] [ 226.840164][T11727] Mem-Info: [ 227.156840][T11727] active_anon:4755 inactive_anon:0 isolated_anon:0 [ 227.156840][T11727] active_file:1312 inactive_file:39879 isolated_file:0 [ 227.156840][T11727] unevictable:768 dirty:61 writeback:0 [ 227.156840][T11727] slab_reclaimable:10676 slab_unreclaimable:102693 [ 227.156840][T11727] mapped:29152 shmem:1367 pagetables:769 [ 227.156840][T11727] sec_pagetables:0 bounce:0 [ 227.156840][T11727] kernel_misc_reclaimable:0 [ 227.156840][T11727] free:1346715 free_pcp:508 free_cma:0 [ 227.203145][T11727] Node 0 active_anon:19020kB inactive_anon:0kB active_file:5248kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116608kB dirty:244kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.289539][T11727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.339018][T11746] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.351589][T11727] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.395843][T11727] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 227.429069][T11727] Node 0 DMA32 free:1459648kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19012kB inactive_anon:0kB active_file:5248kB inactive_file:159220kB unevictable:1536kB writepending:244kB present:3129332kB managed:2564136kB mlocked:0kB bounce:0kB free_pcp:1900kB local_pcp:868kB free_cma:0kB [ 227.467976][T11727] lowmem_reserve[]: 0 0 0 0 0 [ 227.473851][T11727] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 227.522547][T11727] lowmem_reserve[]: 0 0 0 0 0 [ 227.529509][T11727] Node 1 Normal free:3913404kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.559572][T11727] lowmem_reserve[]: 0 0 0 0 0 [ 227.565156][T11727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.581452][T11727] Node 0 DMA32: 3*4kB (ME) 2*8kB (UE) 151*16kB (UM) 228*32kB (UM) 189*64kB (UM) 171*128kB (UME) 102*256kB (UM) 23*512kB (UM) 14*1024kB (UME) 9*2048kB (UM) 328*4096kB (UM) = 1457868kB [ 227.600435][T11727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.613577][T11727] Node 1 Normal: 201*4kB (UE) 43*8kB (UME) 30*16kB (UME) 203*32kB (UME) 74*64kB (UME) 39*128kB (UME) 15*256kB (UM) 7*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 947*4096kB (M) = 3913404kB [ 227.634679][T11727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.650536][T11727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.659978][T11727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.673357][T11727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.715047][T11727] 42555 total pagecache pages [ 227.723298][T11757] C: left promiscuous mode [ 227.739408][T11757] tunl0: left promiscuous mode [ 227.745763][T11757] gre0: left promiscuous mode [ 227.746656][T11727] 0 pages in swap cache [ 227.759588][T11727] Free swap = 124996kB [ 227.763889][T11727] Total swap = 124996kB [ 227.770884][T11727] 2097051 pages RAM [ 227.774848][T11727] 0 pages HighMem/MovableOnly [ 227.784432][T11727] 424359 pages reserved [ 227.789933][T11727] 0 pages cma reserved [ 227.802247][T11757] gretap0: left promiscuous mode [ 227.810124][T11757] erspan0: left promiscuous mode [ 227.818956][T11757] ip_vti0: left promiscuous mode [ 227.833621][T11757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.763020][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.870706][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.993907][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.147884][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.180958][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.190535][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.200477][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.208813][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.227511][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.332900][T11768] wg0 speed is unknown, defaulting to 1000 [ 230.339430][ T63] bridge_slave_1: left allmulticast mode [ 230.350201][ T63] bridge_slave_1: left promiscuous mode [ 230.355992][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.367752][ T63] bridge_slave_0: left allmulticast mode [ 230.373509][ T63] bridge_slave_0: left promiscuous mode [ 230.380887][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.726643][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.741077][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.752896][ T63] bond0 (unregistering): Released all slaves [ 231.002276][T11768] chnl_net:caif_netlink_parms(): no params data found [ 231.069727][ T63] hsr_slave_0: left promiscuous mode [ 231.075666][ T63] hsr_slave_1: left promiscuous mode [ 231.083042][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.090637][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.098825][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.106780][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.131721][ T63] veth1_macvtap: left promiscuous mode [ 231.137603][ T63] veth0_macvtap: left promiscuous mode [ 231.143190][ T63] veth1_vlan: left promiscuous mode [ 231.148613][ T63] veth0_vlan: left promiscuous mode [ 231.451354][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 90 seconds [ 231.600180][ T63] team0 (unregistering): Port device team_slave_1 removed [ 231.643812][ T63] team0 (unregistering): Port device team_slave_0 removed [ 232.069177][T11768] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.077735][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.085673][T11768] bridge_slave_0: entered allmulticast mode [ 232.093703][T11768] bridge_slave_0: entered promiscuous mode [ 232.103784][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.111920][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.119232][T11768] bridge_slave_1: entered allmulticast mode [ 232.126727][T11768] bridge_slave_1: entered promiscuous mode [ 232.172882][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.204165][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.246304][ T55] Bluetooth: hci0: command tx timeout [ 232.253854][T11768] team0: Port device team_slave_0 added [ 232.262250][T11768] team0: Port device team_slave_1 added [ 232.293104][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.301697][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.333164][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.345809][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.353354][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.379429][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.434673][T11768] hsr_slave_0: entered promiscuous mode [ 232.441959][T11768] hsr_slave_1: entered promiscuous mode [ 232.449299][T11768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.456967][T11768] Cannot create hsr debugfs directory [ 234.326272][ T55] Bluetooth: hci0: command tx timeout [ 236.406227][ T55] Bluetooth: hci0: command tx timeout [ 238.213488][ T5200] udevd[5200]: worker [6115] /devices/virtual/block/nbd0 is taking a long time [ 238.486198][ T55] Bluetooth: hci0: command tx timeout [ 243.621594][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.630880][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.639220][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.647583][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.657108][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.694623][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.704948][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.713482][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.721889][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.729943][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.804541][T11782] wg0 speed is unknown, defaulting to 1000 [ 243.820786][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.833468][T11780] wg0 speed is unknown, defaulting to 1000 [ 243.840956][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.848731][ T5140] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 243.859537][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.866715][ T5140] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 243.875053][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 243.883384][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.886940][ T5140] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 243.897081][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.907688][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 244.043669][T11785] wg0 speed is unknown, defaulting to 1000 [ 244.072862][T11784] wg0 speed is unknown, defaulting to 1000 [ 244.225273][T11782] chnl_net:caif_netlink_parms(): no params data found [ 244.373870][T11780] chnl_net:caif_netlink_parms(): no params data found [ 244.529348][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.537273][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.544537][T11782] bridge_slave_0: entered allmulticast mode [ 244.552305][T11782] bridge_slave_0: entered promiscuous mode [ 244.561165][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.570018][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.577589][T11782] bridge_slave_1: entered allmulticast mode [ 244.584889][T11782] bridge_slave_1: entered promiscuous mode [ 244.740047][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.769983][T11785] chnl_net:caif_netlink_parms(): no params data found [ 244.803565][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.853266][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.860926][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.868555][T11780] bridge_slave_0: entered allmulticast mode [ 244.875830][T11780] bridge_slave_0: entered promiscuous mode [ 244.884204][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.891585][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.899544][T11780] bridge_slave_1: entered allmulticast mode [ 244.907676][T11780] bridge_slave_1: entered promiscuous mode [ 244.945211][T11782] team0: Port device team_slave_0 added [ 244.964503][T11784] chnl_net:caif_netlink_parms(): no params data found [ 245.006254][T11782] team0: Port device team_slave_1 added [ 245.045329][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.088613][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.114305][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.122025][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.148710][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.209052][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.216470][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.243080][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.275857][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.283970][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.292110][T11785] bridge_slave_0: entered allmulticast mode [ 245.299675][T11785] bridge_slave_0: entered promiscuous mode [ 245.312473][T11780] team0: Port device team_slave_0 added [ 245.319082][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.326804][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.334048][T11785] bridge_slave_1: entered allmulticast mode [ 245.342010][T11785] bridge_slave_1: entered promiscuous mode [ 245.367303][T11780] team0: Port device team_slave_1 added [ 245.413632][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.460766][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.549508][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.559831][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.586596][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.598325][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.605543][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.614328][T11784] bridge_slave_0: entered allmulticast mode [ 245.622422][T11784] bridge_slave_0: entered promiscuous mode [ 245.650921][T11785] team0: Port device team_slave_0 added [ 245.660931][T11785] team0: Port device team_slave_1 added [ 245.667833][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.674810][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.701357][ T55] Bluetooth: hci5: command tx timeout [ 245.707993][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.727819][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.735159][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.742535][T11784] bridge_slave_1: entered allmulticast mode [ 245.750133][T11784] bridge_slave_1: entered promiscuous mode [ 245.766313][ T55] Bluetooth: hci6: command tx timeout [ 245.783842][T11782] hsr_slave_0: entered promiscuous mode [ 245.790753][T11782] hsr_slave_1: entered promiscuous mode [ 245.797679][T11782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.805375][T11782] Cannot create hsr debugfs directory [ 245.903834][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.913099][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.940103][ T55] Bluetooth: hci7: command tx timeout [ 245.947553][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.961987][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.969145][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.995695][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.022811][ T55] Bluetooth: hci8: command tx timeout [ 246.031439][T11780] hsr_slave_0: entered promiscuous mode [ 246.037947][T11780] hsr_slave_1: entered promiscuous mode [ 246.044115][T11780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.052027][T11780] Cannot create hsr debugfs directory [ 246.061668][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.074975][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.174233][T11784] team0: Port device team_slave_0 added [ 246.221004][T11784] team0: Port device team_slave_1 added [ 246.312784][T11785] hsr_slave_0: entered promiscuous mode [ 246.319997][T11785] hsr_slave_1: entered promiscuous mode [ 246.326715][T11785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.334310][T11785] Cannot create hsr debugfs directory [ 246.346585][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.353582][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.379883][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.393240][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.400477][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.428141][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.590197][T11784] hsr_slave_0: entered promiscuous mode [ 246.597684][T11784] hsr_slave_1: entered promiscuous mode [ 246.603995][T11784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.612228][T11784] Cannot create hsr debugfs directory [ 247.766318][ T55] Bluetooth: hci5: command tx timeout [ 247.846367][ T55] Bluetooth: hci6: command tx timeout [ 248.006377][ T55] Bluetooth: hci7: command tx timeout [ 248.086784][ T55] Bluetooth: hci8: command tx timeout [ 249.846323][ T55] Bluetooth: hci5: command tx timeout [ 249.927098][ T55] Bluetooth: hci6: command tx timeout [ 250.086356][ T55] Bluetooth: hci7: command tx timeout [ 250.166357][ T55] Bluetooth: hci8: command tx timeout [ 251.926513][ T55] Bluetooth: hci5: command tx timeout [ 252.006226][ T55] Bluetooth: hci6: command tx timeout [ 252.166318][ T55] Bluetooth: hci7: command tx timeout [ 252.246341][ T55] Bluetooth: hci8: command tx timeout [ 261.535787][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 120 seconds [ 290.446911][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.457221][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.465644][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.474618][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.483653][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 290.522073][T11813] wg0 speed is unknown, defaulting to 1000 [ 290.683846][T11813] chnl_net:caif_netlink_parms(): no params data found [ 290.773538][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.781067][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.788920][T11813] bridge_slave_0: entered allmulticast mode [ 290.797183][T11813] bridge_slave_0: entered promiscuous mode [ 290.805122][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.812664][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.820319][T11813] bridge_slave_1: entered allmulticast mode [ 290.828382][T11813] bridge_slave_1: entered promiscuous mode [ 290.871264][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.883348][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.925198][T11813] team0: Port device team_slave_0 added [ 290.935164][T11813] team0: Port device team_slave_1 added [ 290.974631][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.981721][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.008668][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.022084][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.029278][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.057045][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.108556][T11813] hsr_slave_0: entered promiscuous mode [ 291.114950][T11813] hsr_slave_1: entered promiscuous mode [ 291.121759][T11813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.129487][T11813] Cannot create hsr debugfs directory [ 291.622890][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 150 seconds [ 292.566273][ T5834] Bluetooth: hci9: command tx timeout [ 294.656150][ T5834] Bluetooth: hci9: command tx timeout [ 296.726640][ T5834] Bluetooth: hci9: command tx timeout [ 298.806339][ T5834] Bluetooth: hci9: command tx timeout [ 303.906899][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 303.919398][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 303.937418][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 303.949185][ T5140] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 303.957142][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 303.968223][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 303.991864][ T5833] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 304.007825][ T5833] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 304.019656][ T5834] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 304.037246][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 304.045473][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 304.077707][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 304.092646][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 304.100992][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 304.109778][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 304.143671][T11825] wg0 speed is unknown, defaulting to 1000 [ 304.197147][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 304.207438][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 304.217486][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 304.227822][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 304.243238][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 304.253835][T11827] wg0 speed is unknown, defaulting to 1000 [ 304.291460][T11829] wg0 speed is unknown, defaulting to 1000 [ 304.365017][T11831] wg0 speed is unknown, defaulting to 1000 [ 304.655374][T11825] chnl_net:caif_netlink_parms(): no params data found [ 304.860611][T11827] chnl_net:caif_netlink_parms(): no params data found [ 305.013493][T11829] chnl_net:caif_netlink_parms(): no params data found [ 305.024946][T11831] chnl_net:caif_netlink_parms(): no params data found [ 305.047490][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.054749][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.063508][T11825] bridge_slave_0: entered allmulticast mode [ 305.071639][T11825] bridge_slave_0: entered promiscuous mode [ 305.110456][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.118219][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.125657][T11825] bridge_slave_1: entered allmulticast mode [ 305.134154][T11825] bridge_slave_1: entered promiscuous mode [ 305.279543][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.300117][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.309913][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.318472][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.325758][T11827] bridge_slave_0: entered allmulticast mode [ 305.333473][T11827] bridge_slave_0: entered promiscuous mode [ 305.342408][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.349988][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.357563][T11827] bridge_slave_1: entered allmulticast mode [ 305.364968][T11827] bridge_slave_1: entered promiscuous mode [ 305.494513][T11825] team0: Port device team_slave_0 added [ 305.508200][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.521802][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.565851][T11831] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.573359][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.581358][T11831] bridge_slave_0: entered allmulticast mode [ 305.589756][T11831] bridge_slave_0: entered promiscuous mode [ 305.598665][T11831] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.607457][T11831] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.614788][T11831] bridge_slave_1: entered allmulticast mode [ 305.622828][T11831] bridge_slave_1: entered promiscuous mode [ 305.632376][T11825] team0: Port device team_slave_1 added [ 305.759863][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.768863][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.777001][T11829] bridge_slave_0: entered allmulticast mode [ 305.784538][T11829] bridge_slave_0: entered promiscuous mode [ 305.795878][T11831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.806575][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.813797][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.841231][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.859731][T11827] team0: Port device team_slave_0 added [ 305.866154][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.873359][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.881076][T11829] bridge_slave_1: entered allmulticast mode [ 305.889458][T11829] bridge_slave_1: entered promiscuous mode [ 305.898868][T11831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.924677][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.932120][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.958905][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.981820][T11827] team0: Port device team_slave_1 added [ 306.016225][ T5834] Bluetooth: hci10: command tx timeout [ 306.059883][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.067140][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.094468][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.095625][ T5834] Bluetooth: hci11: command tx timeout [ 306.133779][T11831] team0: Port device team_slave_0 added [ 306.143328][T11831] team0: Port device team_slave_1 added [ 306.167258][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.174257][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.200479][ T5834] Bluetooth: hci12: command tx timeout [ 306.213022][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.235691][T11829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.285137][T11825] hsr_slave_0: entered promiscuous mode [ 306.293857][T11825] hsr_slave_1: entered promiscuous mode [ 306.300668][T11825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.308734][T11825] Cannot create hsr debugfs directory [ 306.317200][T11829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.327131][ T5834] Bluetooth: hci13: command tx timeout [ 306.409808][T11831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.418061][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.445599][T11831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.459046][T11831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.466393][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.492671][T11831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.517197][T11829] team0: Port device team_slave_0 added [ 306.568465][T11829] team0: Port device team_slave_1 added [ 306.581548][T11827] hsr_slave_0: entered promiscuous mode [ 306.589318][T11827] hsr_slave_1: entered promiscuous mode [ 306.595590][T11827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.603886][T11827] Cannot create hsr debugfs directory [ 306.727453][T11829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.735095][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.761666][T11829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.775292][T11829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.783316][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.809966][T11829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.893223][T11831] hsr_slave_0: entered promiscuous mode [ 306.899826][T11831] hsr_slave_1: entered promiscuous mode [ 306.906975][T11831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.914568][T11831] Cannot create hsr debugfs directory [ 307.110004][T11829] hsr_slave_0: entered promiscuous mode [ 307.118030][T11829] hsr_slave_1: entered promiscuous mode [ 307.124619][T11829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.132521][T11829] Cannot create hsr debugfs directory [ 308.087494][ T5834] Bluetooth: hci10: command tx timeout [ 308.166365][ T5834] Bluetooth: hci11: command tx timeout [ 308.246330][ T5834] Bluetooth: hci12: command tx timeout [ 308.406288][ T5834] Bluetooth: hci13: command tx timeout [ 310.166403][ T5140] Bluetooth: hci10: command tx timeout [ 310.246256][ T5140] Bluetooth: hci11: command tx timeout [ 310.326184][ T5140] Bluetooth: hci12: command tx timeout [ 310.486187][ T5140] Bluetooth: hci13: command tx timeout [ 312.246290][ T5140] Bluetooth: hci10: command tx timeout [ 312.336403][ T5140] Bluetooth: hci11: command tx timeout [ 312.406111][ T5140] Bluetooth: hci12: command tx timeout [ 312.566360][ T5140] Bluetooth: hci13: command tx timeout [ 321.689605][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 180 seconds [ 323.439215][ T5200] udevd[5200]: worker [6115] /devices/virtual/block/nbd0 timeout; kill it [ 323.448242][ T5200] udevd[5200]: seq 12623 '/devices/virtual/block/nbd0' killed [ 351.678756][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 351.688616][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 351.697626][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 351.708518][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 351.717223][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 351.763719][T11858] wg0 speed is unknown, defaulting to 1000 [ 351.796326][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 210 seconds [ 351.953480][T11858] chnl_net:caif_netlink_parms(): no params data found [ 352.049158][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.056802][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.064048][T11858] bridge_slave_0: entered allmulticast mode [ 352.072778][T11858] bridge_slave_0: entered promiscuous mode [ 352.083067][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.091279][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.099587][T11858] bridge_slave_1: entered allmulticast mode [ 352.107776][T11858] bridge_slave_1: entered promiscuous mode [ 352.149489][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.161826][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.206833][T11858] team0: Port device team_slave_0 added [ 352.218126][T11858] team0: Port device team_slave_1 added [ 352.253542][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.260728][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.287372][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.301128][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.308301][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.334948][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.392221][T11858] hsr_slave_0: entered promiscuous mode [ 352.399148][T11858] hsr_slave_1: entered promiscuous mode [ 352.409855][T11858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.418167][T11858] Cannot create hsr debugfs directory [ 353.766357][ T5834] Bluetooth: hci14: command tx timeout [ 355.129025][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 355.856329][ T5140] Bluetooth: hci14: command tx timeout [ 357.926349][ T5140] Bluetooth: hci14: command tx timeout [ 360.006595][ T5140] Bluetooth: hci14: command tx timeout [ 364.126443][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 364.136922][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 364.156189][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 364.206691][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 364.226485][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 364.259468][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 364.269231][ T55] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 364.278228][ T55] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 364.288283][ T55] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 364.296671][ T55] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 364.362650][T11872] wg0 speed is unknown, defaulting to 1000 [ 364.371503][T11870] wg0 speed is unknown, defaulting to 1000 [ 364.411523][ T55] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 364.421290][ T55] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 364.430477][ T55] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 364.440380][ T55] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 364.452455][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 364.452762][ T55] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 364.478261][ T55] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 364.493466][ T55] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 364.504000][ T55] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 364.513841][ T55] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 364.675632][T11874] wg0 speed is unknown, defaulting to 1000 [ 364.743689][T11876] wg0 speed is unknown, defaulting to 1000 [ 364.885508][T11872] chnl_net:caif_netlink_parms(): no params data found [ 364.964718][T11870] chnl_net:caif_netlink_parms(): no params data found [ 365.176779][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.183962][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.191751][T11872] bridge_slave_0: entered allmulticast mode [ 365.200277][T11872] bridge_slave_0: entered promiscuous mode [ 365.211001][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.218386][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.225776][T11872] bridge_slave_1: entered allmulticast mode [ 365.234015][T11872] bridge_slave_1: entered promiscuous mode [ 365.354187][T11872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.365761][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.374533][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.382904][T11870] bridge_slave_0: entered allmulticast mode [ 365.391763][T11870] bridge_slave_0: entered promiscuous mode [ 365.421194][T11872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.451911][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.459666][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.467558][T11870] bridge_slave_1: entered allmulticast mode [ 365.475026][T11870] bridge_slave_1: entered promiscuous mode [ 365.543605][T11872] team0: Port device team_slave_0 added [ 365.599713][T11872] team0: Port device team_slave_1 added [ 365.614643][T11870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.651977][T11870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.696681][T11874] chnl_net:caif_netlink_parms(): no params data found [ 365.775725][T11872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.783143][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.810153][T11872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.885327][T11872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.896863][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.929280][T11872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.953474][T11870] team0: Port device team_slave_0 added [ 365.974858][T11876] chnl_net:caif_netlink_parms(): no params data found [ 365.994438][T11870] team0: Port device team_slave_1 added [ 366.157005][T11870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.164024][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.191931][T11870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.205364][T11870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.213504][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.240723][T11870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.275620][T11872] hsr_slave_0: entered promiscuous mode [ 366.283038][T11872] hsr_slave_1: entered promiscuous mode [ 366.289720][T11872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.297624][T11872] Cannot create hsr debugfs directory [ 366.303349][T11874] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.311179][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.319396][T11874] bridge_slave_0: entered allmulticast mode [ 366.326286][ T5140] Bluetooth: hci16: command tx timeout [ 366.332878][ T55] Bluetooth: hci15: command tx timeout [ 366.340900][T11874] bridge_slave_0: entered promiscuous mode [ 366.364076][T11874] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.371592][T11874] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.379459][T11874] bridge_slave_1: entered allmulticast mode [ 366.387883][T11874] bridge_slave_1: entered promiscuous mode [ 366.486519][ T5140] Bluetooth: hci17: command tx timeout [ 366.505059][T11874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.539143][T11870] hsr_slave_0: entered promiscuous mode [ 366.545797][T11870] hsr_slave_1: entered promiscuous mode [ 366.552913][T11870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.560927][T11870] Cannot create hsr debugfs directory [ 366.576520][ T5140] Bluetooth: hci18: command tx timeout [ 366.601617][T11874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.672998][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.681344][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.691838][T11876] bridge_slave_0: entered allmulticast mode [ 366.700226][T11876] bridge_slave_0: entered promiscuous mode [ 366.742194][T11876] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.750235][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.759012][T11876] bridge_slave_1: entered allmulticast mode [ 366.767120][T11876] bridge_slave_1: entered promiscuous mode [ 366.803379][T11874] team0: Port device team_slave_0 added [ 366.821839][T11874] team0: Port device team_slave_1 added [ 366.941653][T11876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.986764][T11874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.993758][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.020269][T11874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.040274][T11876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.089120][T11874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.096337][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.123205][T11874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.181806][T11876] team0: Port device team_slave_0 added [ 367.191582][T11876] team0: Port device team_slave_1 added [ 367.347785][T11874] hsr_slave_0: entered promiscuous mode [ 367.354882][T11874] hsr_slave_1: entered promiscuous mode [ 367.361835][T11874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.369855][T11874] Cannot create hsr debugfs directory [ 367.380458][T11876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.388086][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.415016][T11876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.454832][T11876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.462094][T11876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.489193][T11876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.660949][T11876] hsr_slave_0: entered promiscuous mode [ 367.668670][T11876] hsr_slave_1: entered promiscuous mode [ 367.675332][T11876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.683556][T11876] Cannot create hsr debugfs directory [ 368.410440][ T5833] Bluetooth: hci16: command tx timeout [ 368.410802][ T55] Bluetooth: hci15: command tx timeout [ 368.571081][ T55] Bluetooth: hci17: command tx timeout [ 368.647166][ T55] Bluetooth: hci18: command tx timeout [ 370.488482][T11044] Bluetooth: hci15: command tx timeout [ 370.494157][T11044] Bluetooth: hci7: command 0x0406 tx timeout [ 370.500538][T10995] Bluetooth: hci6: command 0x0406 tx timeout [ 370.501534][T11902] Bluetooth: hci8: command 0x0406 tx timeout [ 370.506711][ T5837] Bluetooth: hci16: command tx timeout [ 370.509465][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 370.646115][ T5140] Bluetooth: hci17: command tx timeout [ 370.731567][ T5140] Bluetooth: hci18: command tx timeout [ 372.566093][ T5140] Bluetooth: hci16: command tx timeout [ 372.566102][ T5833] Bluetooth: hci15: command tx timeout [ 372.726502][ T5140] Bluetooth: hci17: command tx timeout [ 372.806332][ T5140] Bluetooth: hci18: command tx timeout [ 381.876546][ T59] block nbd0: Possible stuck request ffff888025280000: control (read@0,4096B). Runtime 240 seconds [ 389.526425][ T31] INFO: task syz.1.1643:11750 blocked for more than 143 seconds. [ 389.534217][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 389.542781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.551663][ T31] task:syz.1.1643 state:D stack:25464 pid:11750 tgid:11747 ppid:5843 task_flags:0x480140 flags:0x00000004 [ 389.563793][ T31] Call Trace: [ 389.567244][ T31] [ 389.570209][ T31] __schedule+0x16e2/0x4cd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.574892][ T31] ? __lock_acquire+0xaac/0xd20 [ 389.586354][ T31] ? schedule+0x165/0x360 [ 389.591052][ T31] ? __pfx___schedule+0x10/0x10 [ 389.596831][ T31] ? schedule+0x91/0x360 [ 389.601143][ T31] schedule+0x165/0x360 [ 389.605354][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 389.611560][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 389.656352][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 389.662538][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 389.686269][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 389.692595][ T31] ? nbd_set_size+0x2bd/0x6c0 [ 389.698649][ T31] nbd_set_size+0x496/0x6c0 [ 389.703223][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 389.708818][ T31] ? __mutex_trylock_common+0x153/0x260 [ 389.714445][ T31] ? __mutex_lock+0x330/0xe80 [ 389.719751][ T31] ? nla_memcpy+0x5b/0xc0 [ 389.724154][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 389.729611][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 389.736355][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 389.742411][ T31] ? bpf_lsm_capable+0x9/0x20 [ 389.747573][ T31] ? security_capable+0x7e/0x2e0 [ 389.752547][ T31] ? radix_tree_lookup+0x240/0x290 [ 389.758189][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 389.763536][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 389.770162][ T31] ? __nla_parse+0x40/0x60 [ 389.774649][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 389.781944][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 389.788108][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 389.794308][ T31] ? stack_depot_save_flags+0x40/0x910 [ 389.800474][ T31] genl_rcv_msg+0x60e/0x790 [ 389.805077][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.810697][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 389.817185][ T31] netlink_rcv_skb+0x219/0x490 [ 389.822014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.827613][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.832992][ T31] ? down_read+0x1ad/0x2e0 [ 389.837925][ T31] genl_rcv+0x28/0x40 [ 389.842022][ T31] netlink_unicast+0x758/0x8d0 [ 389.847479][ T31] netlink_sendmsg+0x805/0xb30 [ 389.852320][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.857782][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 389.862782][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.868260][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.873592][ T31] __sock_sendmsg+0x219/0x270 [ 389.878421][ T31] ____sys_sendmsg+0x505/0x830 [ 389.883863][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.889357][ T31] ? import_iovec+0x74/0xa0 [ 389.893919][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 389.898843][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.904172][ T31] ? __fget_files+0x2a/0x420 [ 389.909865][ T31] ? __fget_files+0x3a0/0x420 [ 389.914621][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 389.919711][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.925228][ T31] ? do_syscall_64+0xba/0x210 [ 389.931163][ T31] do_syscall_64+0xf6/0x210 [ 389.935734][ T31] ? clear_bhb_loop+0x45/0xa0 [ 389.941315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.947814][ T31] RIP: 0033:0x7f6d1018e969 [ 389.952446][ T31] RSP: 002b:00007f6d1108e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.961260][ T31] RAX: ffffffffffffffda RBX: 00007f6d103b5fa0 RCX: 00007f6d1018e969 [ 389.969962][ T31] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 389.978099][ T31] RBP: 00007f6d10210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 389.987703][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.995725][ T31] R13: 0000000000000000 R14: 00007f6d103b5fa0 R15: 00007ffc277edd48 [ 390.003833][ T31] [ 390.007461][ T31] INFO: task syz.4.1644:11752 blocked for more than 143 seconds. [ 390.015232][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 390.024755][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.033597][ T31] task:syz.4.1644 state:D stack:27288 pid:11752 tgid:11751 ppid:5841 task_flags:0x400140 flags:0x00004004 [ 390.047084][ T31] Call Trace: [ 390.050414][ T31] [ 390.053376][ T31] __schedule+0x16e2/0x4cd0 [ 390.058662][ T31] ? __lock_acquire+0xaac/0xd20 [ 390.063665][ T31] ? schedule+0x165/0x360 [ 390.068407][ T31] ? __pfx___schedule+0x10/0x10 [ 390.073328][ T31] ? schedule+0x91/0x360 [ 390.077939][ T31] schedule+0x165/0x360 [ 390.082129][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.088451][ T31] __mutex_lock+0x724/0xe80 [ 390.093012][ T31] ? __mutex_lock+0x51b/0xe80 [ 390.098802][ T31] ? genl_rcv_msg+0x10d/0x790 [ 390.103539][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.109023][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 390.114199][ T31] ? radix_tree_lookup+0x240/0x290 [ 390.119790][ T31] genl_rcv_msg+0x10d/0x790 [ 390.124346][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.130583][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 390.135655][ T31] ? __copy_skb_header+0xa7/0x550 [ 390.141037][ T31] netlink_rcv_skb+0x219/0x490 [ 390.145949][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.151189][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.157426][ T31] ? down_read+0x1ad/0x2e0 [ 390.161937][ T31] genl_rcv+0x28/0x40 [ 390.166238][ T31] netlink_unicast+0x758/0x8d0 [ 390.172962][ T31] netlink_sendmsg+0x805/0xb30 [ 390.178488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.183845][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 390.190353][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.195692][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.201114][ T31] __sock_sendmsg+0x219/0x270 [ 390.206166][ T31] ____sys_sendmsg+0x505/0x830 [ 390.211176][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.216780][ T31] ? import_iovec+0x74/0xa0 [ 390.221342][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 390.226254][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.231581][ T31] ? __fget_files+0x2a/0x420 [ 390.236281][ T31] ? __fget_files+0x3a0/0x420 [ 390.241020][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 390.246316][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.251843][ T31] ? do_syscall_64+0xba/0x210 [ 390.256666][ T31] do_syscall_64+0xf6/0x210 [ 390.261203][ T31] ? clear_bhb_loop+0x45/0xa0 [ 390.266248][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.272183][ T31] RIP: 0033:0x7f3540b8e969 [ 390.276727][ T31] RSP: 002b:00007f3541a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.285196][ T31] RAX: ffffffffffffffda RBX: 00007f3540db5fa0 RCX: 00007f3540b8e969 [ 390.293567][ T31] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 0000000000000006 [ 390.301714][ T31] RBP: 00007f3540c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 390.309874][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.317952][ T31] R13: 0000000000000000 R14: 00007f3540db5fa0 R15: 00007fffae901b48 [ 390.326395][ T31] [ 390.329494][ T31] INFO: task syz.3.1645:11756 blocked for more than 144 seconds. [ 390.337414][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 390.345070][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.354052][ T31] task:syz.3.1645 state:D stack:28536 pid:11756 tgid:11755 ppid:5829 task_flags:0x400040 flags:0x00000004 [ 390.366245][ T31] Call Trace: [ 390.369564][ T31] [ 390.372501][ T31] __schedule+0x16e2/0x4cd0 [ 390.377194][ T31] ? __lock_acquire+0xaac/0xd20 [ 390.382092][ T31] ? schedule+0x165/0x360 [ 390.386612][ T31] ? __pfx___schedule+0x10/0x10 [ 390.391650][ T31] ? schedule+0x91/0x360 [ 390.396047][ T31] schedule+0x165/0x360 [ 390.400252][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.405717][ T31] __mutex_lock+0x724/0xe80 [ 390.410591][ T31] ? __mutex_lock+0x51b/0xe80 [ 390.415319][ T31] ? genl_rcv_msg+0x10d/0x790 [ 390.420682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.425762][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 390.431113][ T31] ? radix_tree_lookup+0x240/0x290 [ 390.436318][ T31] genl_rcv_msg+0x10d/0x790 [ 390.440874][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.446794][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 390.451862][ T31] ? __copy_skb_header+0xa7/0x550 [ 390.457163][ T31] netlink_rcv_skb+0x219/0x490 [ 390.461957][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.467874][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.473245][ T31] ? down_read+0x1ad/0x2e0 [ 390.477772][ T31] genl_rcv+0x28/0x40 [ 390.481790][ T31] netlink_unicast+0x758/0x8d0 [ 390.486919][ T31] netlink_sendmsg+0x805/0xb30 [ 390.491774][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.499236][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 390.504251][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.509672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.515028][ T31] __sock_sendmsg+0x219/0x270 [ 390.519980][ T31] __sys_sendto+0x3bd/0x520 [ 390.524536][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 390.529731][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 390.535323][ T31] __x64_sys_sendto+0xde/0x100 [ 390.540398][ T31] do_syscall_64+0xf6/0x210 [ 390.544952][ T31] ? clear_bhb_loop+0x45/0xa0 [ 390.550094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.556237][ T31] RIP: 0033:0x7f4fbcf907fc [ 390.561848][ T31] RSP: 002b:00007f4fbadf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 390.570910][ T31] RAX: ffffffffffffffda RBX: 00007f4fbadf4fc0 RCX: 00007f4fbcf907fc [ 390.579112][ T31] RDX: 0000000000000020 RSI: 00007f4fbadf5010 RDI: 0000000000000005 [ 390.587322][ T31] RBP: 0000000000000000 R08: 00007f4fbadf4f14 R09: 000000000000000c [ 390.595343][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 390.603644][ T31] R13: 00007f4fbadf4f68 R14: 00007f4fbadf5010 R15: 0000000000000000 [ 390.612221][ T31] [ 390.615441][ T31] INFO: task syz.2.1647:11763 blocked for more than 144 seconds. [ 390.627646][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 390.635331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.644184][ T31] task:syz.2.1647 state:D stack:24712 pid:11763 tgid:11762 ppid:5838 task_flags:0x400140 flags:0x00000004 [ 390.656355][ T31] Call Trace: [ 390.659655][ T31] [ 390.662594][ T31] __schedule+0x16e2/0x4cd0 [ 390.667709][ T31] ? __lock_acquire+0xaac/0xd20 [ 390.672609][ T31] ? schedule+0x165/0x360 [ 390.677161][ T31] ? __pfx___schedule+0x10/0x10 [ 390.682070][ T31] ? schedule+0x91/0x360 [ 390.686410][ T31] schedule+0x165/0x360 [ 390.690590][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.696212][ T31] __mutex_lock+0x724/0xe80 [ 390.700883][ T31] ? __mutex_lock+0x51b/0xe80 [ 390.705615][ T31] ? genl_rcv_msg+0x10d/0x790 [ 390.710452][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.715629][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 390.720910][ T31] ? radix_tree_lookup+0x240/0x290 [ 390.726208][ T31] genl_rcv_msg+0x10d/0x790 [ 390.730764][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.736060][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 390.741302][ T31] ? __copy_skb_header+0xa7/0x550 [ 390.746470][ T31] netlink_rcv_skb+0x219/0x490 [ 390.751267][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.756464][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.761805][ T31] ? down_read+0x1ad/0x2e0 [ 390.766344][ T31] genl_rcv+0x28/0x40 [ 390.770366][ T31] netlink_unicast+0x758/0x8d0 [ 390.775167][ T31] netlink_sendmsg+0x805/0xb30 [ 390.780158][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.785492][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 390.790539][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.796021][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.801486][ T31] __sock_sendmsg+0x219/0x270 [ 390.806488][ T31] __sys_sendto+0x3bd/0x520 [ 390.811038][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 390.816242][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 390.821615][ T31] __x64_sys_sendto+0xde/0x100 [ 390.826509][ T31] do_syscall_64+0xf6/0x210 [ 390.831063][ T31] ? clear_bhb_loop+0x45/0xa0 [ 390.835772][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.841893][ T31] RIP: 0033:0x7f138d3907fc [ 390.846418][ T31] RSP: 002b:00007f138e1efec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 390.854870][ T31] RAX: ffffffffffffffda RBX: 00007f138e1effc0 RCX: 00007f138d3907fc [ 390.863030][ T31] RDX: 0000000000000020 RSI: 00007f138e1f0010 RDI: 0000000000000006 [ 390.871167][ T31] RBP: 0000000000000000 R08: 00007f138e1eff14 R09: 000000000000000c [ 390.879308][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 390.887683][ T31] R13: 00007f138e1eff68 R14: 00007f138e1f0010 R15: 0000000000000000 [ 390.895697][ T31] [ 390.898991][ T31] INFO: task syz.2.1647:11764 blocked for more than 144 seconds. [ 390.907110][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 390.914772][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.923622][ T31] task:syz.2.1647 state:D stack:26888 pid:11764 tgid:11762 ppid:5838 task_flags:0x400140 flags:0x00000004 [ 390.935693][ T31] Call Trace: [ 390.939179][ T31] [ 390.942142][ T31] __schedule+0x16e2/0x4cd0 [ 390.946767][ T31] ? __lock_acquire+0xaac/0xd20 [ 390.951658][ T31] ? schedule+0x165/0x360 [ 390.956220][ T31] ? __pfx___schedule+0x10/0x10 [ 390.961111][ T31] ? schedule+0x91/0x360 [ 390.965361][ T31] schedule+0x165/0x360 [ 390.969744][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.975248][ T31] __mutex_lock+0x724/0xe80 [ 390.979932][ T31] ? __mutex_lock+0x51b/0xe80 [ 390.984657][ T31] ? genl_rcv_msg+0x10d/0x790 [ 390.989487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.994577][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 390.999914][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.005081][ T31] genl_rcv_msg+0x10d/0x790 [ 391.009845][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.014925][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 391.020122][ T31] ? __copy_skb_header+0xa7/0x550 [ 391.025275][ T31] netlink_rcv_skb+0x219/0x490 [ 391.030143][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.035205][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.040700][ T31] ? down_read+0x1ad/0x2e0 [ 391.045264][ T31] genl_rcv+0x28/0x40 [ 391.049597][ T31] netlink_unicast+0x758/0x8d0 [ 391.054409][ T31] netlink_sendmsg+0x805/0xb30 [ 391.059364][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.064726][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.069821][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.075155][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.080791][ T31] __sock_sendmsg+0x219/0x270 [ 391.085515][ T31] __sys_sendto+0x3bd/0x520 [ 391.090132][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.095228][ T31] ? fd_install+0x97/0x540 [ 391.099875][ T31] ? fd_install+0x30d/0x540 [ 391.104417][ T31] __x64_sys_sendto+0xde/0x100 [ 391.109424][ T31] do_syscall_64+0xf6/0x210 [ 391.113974][ T31] ? clear_bhb_loop+0x45/0xa0 [ 391.118864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.124818][ T31] RIP: 0033:0x7f138d3907fc [ 391.129461][ T31] RSP: 002b:00007f138e1ceec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 391.139292][ T31] RAX: ffffffffffffffda RBX: 00007f138e1cefc0 RCX: 00007f138d3907fc [ 391.148700][ T31] RDX: 0000000000000020 RSI: 00007f138e1cf010 RDI: 000000000000000b [ 391.156800][ T31] RBP: 0000000000000000 R08: 00007f138e1cef14 R09: 000000000000000c [ 391.164798][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 391.172975][ T31] R13: 00007f138e1cef68 R14: 00007f138e1cf010 R15: 0000000000000000 [ 391.181119][ T31] [ 391.184174][ T31] INFO: task syz.2.1647:11765 blocked for more than 145 seconds. [ 391.192480][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 391.200400][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.209367][ T31] task:syz.2.1647 state:D stack:28264 pid:11765 tgid:11762 ppid:5838 task_flags:0x400040 flags:0x00000004 [ 391.222048][ T31] Call Trace: [ 391.225369][ T31] [ 391.228398][ T31] __schedule+0x16e2/0x4cd0 [ 391.232954][ T31] ? __lock_acquire+0xaac/0xd20 [ 391.237939][ T31] ? schedule+0x165/0x360 [ 391.242314][ T31] ? __pfx___schedule+0x10/0x10 [ 391.248415][ T31] ? schedule+0x91/0x360 [ 391.252720][ T31] schedule+0x165/0x360 [ 391.257308][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.262803][ T31] __mutex_lock+0x724/0xe80 [ 391.267453][ T31] ? __mutex_lock+0x51b/0xe80 [ 391.272192][ T31] ? genl_rcv_msg+0x10d/0x790 [ 391.277070][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.282216][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 391.287514][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.292661][ T31] genl_rcv_msg+0x10d/0x790 [ 391.297595][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.302667][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 391.307797][ T31] ? __copy_skb_header+0xa7/0x550 [ 391.312995][ T31] netlink_rcv_skb+0x219/0x490 [ 391.318005][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.323080][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.328531][ T31] ? down_read+0x1ad/0x2e0 [ 391.332995][ T31] genl_rcv+0x28/0x40 [ 391.337192][ T31] netlink_unicast+0x758/0x8d0 [ 391.342036][ T31] netlink_sendmsg+0x805/0xb30 [ 391.346968][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.352284][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.357420][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.362740][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.368403][ T31] __sock_sendmsg+0x219/0x270 [ 391.373134][ T31] __sys_sendto+0x3bd/0x520 [ 391.377835][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.382940][ T31] ? fd_install+0x97/0x540 [ 391.387480][ T31] ? fd_install+0x30d/0x540 [ 391.392019][ T31] __x64_sys_sendto+0xde/0x100 [ 391.396953][ T31] do_syscall_64+0xf6/0x210 [ 391.401500][ T31] ? clear_bhb_loop+0x45/0xa0 [ 391.406331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.412362][ T31] RIP: 0033:0x7f138d3907fc [ 391.417080][ T31] RSP: 002b:00007f138e1adec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 391.425543][ T31] RAX: ffffffffffffffda RBX: 00007f138e1adfc0 RCX: 00007f138d3907fc [ 391.433627][ T31] RDX: 0000000000000020 RSI: 00007f138e1ae010 RDI: 000000000000000d [ 391.441780][ T31] RBP: 0000000000000000 R08: 00007f138e1adf14 R09: 000000000000000c [ 391.449997][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 391.458168][ T31] R13: 00007f138e1adf68 R14: 00007f138e1ae010 R15: 0000000000000000 [ 391.466306][ T31] [ 391.469366][ T31] INFO: task syz-executor:11768 blocked for more than 145 seconds. [ 391.477539][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 391.485417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.494216][ T31] task:syz-executor state:D stack:22536 pid:11768 tgid:11768 ppid:1 task_flags:0x400140 flags:0x00000004 [ 391.506307][ T31] Call Trace: [ 391.509677][ T31] [ 391.512609][ T31] __schedule+0x16e2/0x4cd0 [ 391.517212][ T31] ? __lock_acquire+0xaac/0xd20 [ 391.522231][ T31] ? schedule+0x165/0x360 [ 391.532884][ T31] ? __pfx___schedule+0x10/0x10 [ 391.537931][ T31] ? schedule+0x91/0x360 [ 391.542226][ T31] schedule+0x165/0x360 [ 391.546565][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.552056][ T31] __mutex_lock+0x724/0xe80 [ 391.556669][ T31] ? __mutex_lock+0x51b/0xe80 [ 391.561384][ T31] ? genl_rcv_msg+0x10d/0x790 [ 391.566252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.571334][ T31] ? stack_depot_save_flags+0x40/0x910 [ 391.576926][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.582065][ T31] genl_rcv_msg+0x10d/0x790 [ 391.586754][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.591827][ T31] ? __lock_acquire+0xaac/0xd20 [ 391.598014][ T31] netlink_rcv_skb+0x219/0x490 [ 391.602828][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.608137][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.613474][ T31] ? down_read+0x1ad/0x2e0 [ 391.618025][ T31] genl_rcv+0x28/0x40 [ 391.622167][ T31] netlink_unicast+0x758/0x8d0 [ 391.627112][ T31] netlink_sendmsg+0x805/0xb30 [ 391.631928][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.637350][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.642320][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.647865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.653188][ T31] __sock_sendmsg+0x219/0x270 [ 391.658109][ T31] __sys_sendto+0x3bd/0x520 [ 391.662648][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.667891][ T31] ? fd_install+0x97/0x540 [ 391.672342][ T31] ? fd_install+0x30d/0x540 [ 391.676969][ T31] __x64_sys_sendto+0xde/0x100 [ 391.681780][ T31] do_syscall_64+0xf6/0x210 [ 391.686543][ T31] ? clear_bhb_loop+0x45/0xa0 [ 391.691268][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.697262][ T31] RIP: 0033:0x7f410d5907fc [ 391.701697][ T31] RSP: 002b:00007fff87385860 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 391.710900][ T31] RAX: ffffffffffffffda RBX: 00007f410e2e4620 RCX: 00007f410d5907fc [ 391.720669][ T31] RDX: 0000000000000020 RSI: 00007f410e2e4670 RDI: 0000000000000005 [ 391.729030][ T31] RBP: 0000000000000000 R08: 00007fff873858b4 R09: 000000000000000c [ 391.737138][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 391.745156][ T31] R13: 00007fff87385908 R14: 00007f410e2e4670 R15: 0000000000000000 [ 391.753309][ T31] [ 391.756476][ T31] [ 391.756476][ T31] Showing all locks held in the system: [ 391.764307][ T31] 1 lock held by khungtaskd/31: [ 391.769442][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.779842][ T31] 2 locks held by getty/5592: [ 391.784751][ T31] #0: ffff8880309ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.794987][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 391.805745][ T31] 1 lock held by udevd/6115: [ 391.810692][ T31] #0: ffff888143785358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 391.820146][ T31] 6 locks held by syz.1.1643/11750: [ 391.825971][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.834246][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 391.844884][ T31] #2: ffff88802517f198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 391.855876][ T31] #3: ffff888025072438 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 391.865354][ T31] #4: ffff888025071de8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 391.878406][ T31] #5: ffff888025071e20 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 391.890897][ T31] 2 locks held by syz.4.1644/11752: [ 391.896340][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.904699][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 391.913775][ T31] 2 locks held by syz.3.1645/11756: [ 391.919181][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.928453][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 391.937673][ T31] 2 locks held by syz.2.1647/11763: [ 391.942909][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.951263][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 391.960462][ T31] 2 locks held by syz.2.1647/11764: [ 391.965734][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.974104][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 391.983297][ T31] 2 locks held by syz.2.1647/11765: [ 391.988916][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 391.997282][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.006619][ T31] 2 locks held by syz-executor/11768: [ 392.012031][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.020434][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.030181][ T31] 2 locks held by syz-executor/11780: [ 392.035580][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.043974][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.053197][ T31] 2 locks held by syz-executor/11782: [ 392.058910][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.067232][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.076519][ T31] 2 locks held by syz-executor/11784: [ 392.081940][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.090619][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.100195][ T31] 2 locks held by syz-executor/11785: [ 392.105629][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.114003][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.123282][ T31] 2 locks held by syz-executor/11813: [ 392.128832][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.137743][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.146861][ T31] 2 locks held by syz-executor/11825: [ 392.152258][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.160684][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.170277][ T31] 2 locks held by syz-executor/11827: [ 392.175688][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.184122][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.193233][ T31] 2 locks held by syz-executor/11829: [ 392.198765][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.207433][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.216748][ T31] 2 locks held by syz-executor/11831: [ 392.222153][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.230523][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.240220][ T31] 2 locks held by syz-executor/11858: [ 392.245625][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.254093][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.263234][ T31] 2 locks held by syz-executor/11870: [ 392.268715][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.277041][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.286310][ T31] 2 locks held by syz-executor/11872: [ 392.291805][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.300223][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.309409][ T31] 2 locks held by syz-executor/11874: [ 392.314798][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.323435][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.332636][ T31] 2 locks held by syz-executor/11876: [ 392.338686][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.347098][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 392.356304][ T31] [ 392.358662][ T31] ============================================= [ 392.358662][ T31] [ 392.367504][ T31] NMI backtrace for cpu 0 [ 392.367526][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 392.367549][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.367568][ T31] Call Trace: [ 392.367576][ T31] [ 392.367584][ T31] dump_stack_lvl+0x189/0x250 [ 392.367613][ T31] ? __wake_up_klogd+0xd9/0x110 [ 392.367639][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.367667][ T31] ? __pfx__printk+0x10/0x10 [ 392.367699][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.367722][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.367737][ T31] ? _printk+0xcf/0x120 [ 392.367761][ T31] ? __pfx__printk+0x10/0x10 [ 392.367782][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.367804][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.367826][ T31] watchdog+0xfee/0x1030 [ 392.367852][ T31] ? watchdog+0x1de/0x1030 [ 392.367882][ T31] kthread+0x70e/0x8a0 [ 392.367909][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.367931][ T31] ? __pfx_kthread+0x10/0x10 [ 392.367954][ T31] ? __pfx_kthread+0x10/0x10 [ 392.367975][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.367994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.368015][ T31] ? __pfx_kthread+0x10/0x10 [ 392.368036][ T31] ret_from_fork+0x4b/0x80 [ 392.368053][ T31] ? __pfx_kthread+0x10/0x10 [ 392.368076][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.368111][ T31] [ 392.368119][ T31] Sending NMI from CPU 0 to CPUs 1: [ 392.517409][ C1] NMI backtrace for cpu 1 [ 392.517430][ C1] CPU: 1 UID: 0 PID: 7178 Comm: kworker/u8:9 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 392.517452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.517463][ C1] Workqueue: events_unbound toggle_allocation_gate [ 392.517491][ C1] RIP: 0010:__lock_acquire+0x5ea/0xd20 [ 392.517516][ C1] Code: 4f da e0 0d 00 0f 84 3a 05 00 00 83 7c 24 08 00 0f 84 a9 00 00 00 41 8b 47 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d d2 51 d7 10 00 00 03 00 74 38 85 c9 74 1d 48 8b 3c 24 4c 89 fe ba 01 00 00 [ 392.517537][ C1] RSP: 0018:ffffc900051af6e0 EFLAGS: 00000006 [ 392.517550][ C1] RAX: 00000000000c0055 RBX: 0000000000000002 RCX: 0000000000000000 [ 392.517561][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88805935da00 [ 392.517572][ C1] RBP: ffff88805935e4f0 R08: 0000000000000000 R09: 0000000000080000 [ 392.517583][ C1] R10: 0000000000000000 R11: ffffffff81ad764e R12: 00000000ffffff05 [ 392.517595][ C1] R13: 0000000000000000 R14: ffff88805935e560 R15: ffff88805935e540 [ 392.517606][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 392.517620][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.517631][ C1] CR2: 0000560cbba7c650 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 392.517645][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.517655][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.517665][ C1] Call Trace: [ 392.517672][ C1] [ 392.517683][ C1] ? __mod_timer+0x1ae/0xf30 [ 392.517699][ C1] lock_acquire+0x120/0x360 [ 392.517721][ C1] ? __mod_timer+0x1ae/0xf30 [ 392.517739][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 392.517759][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 392.517787][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 392.517803][ C1] ? __mod_timer+0x1ae/0xf30 [ 392.517820][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 392.517835][ C1] ? debug_object_assert_init+0x20e/0x380 [ 392.517865][ C1] __mod_timer+0x1ae/0xf30 [ 392.517882][ C1] ? static_key_disable+0x1a/0x20 [ 392.517910][ C1] queue_delayed_work_on+0x18b/0x280 [ 392.517930][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 392.517946][ C1] ? rcu_read_lock_any_held+0xb3/0x120 [ 392.517961][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 392.517982][ C1] toggle_allocation_gate+0x1e8/0x240 [ 392.518002][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 392.518023][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 392.518047][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 392.518072][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 392.518098][ C1] process_scheduled_works+0xadb/0x17a0 [ 392.518136][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.518169][ C1] worker_thread+0x8a0/0xda0 [ 392.518186][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.518207][ C1] ? __kthread_parkme+0x7b/0x200 [ 392.518227][ C1] kthread+0x70e/0x8a0 [ 392.518247][ C1] ? __pfx_worker_thread+0x10/0x10 [ 392.518262][ C1] ? __pfx_kthread+0x10/0x10 [ 392.518281][ C1] ? __pfx_kthread+0x10/0x10 [ 392.518299][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.518315][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.518334][ C1] ? __pfx_kthread+0x10/0x10 [ 392.518351][ C1] ret_from_fork+0x4b/0x80 [ 392.518368][ C1] ? __pfx_kthread+0x10/0x10 [ 392.518386][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.518409][ C1] [ 392.519592][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.862007][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 392.873822][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.883889][ T31] Call Trace: [ 392.887179][ T31] [ 392.890122][ T31] dump_stack_lvl+0x99/0x250 [ 392.894729][ T31] ? __asan_memcpy+0x40/0x70 [ 392.899331][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.904576][ T31] ? __pfx__printk+0x10/0x10 [ 392.909200][ T31] panic+0x2db/0x790 [ 392.913118][ T31] ? __pfx_panic+0x10/0x10 [ 392.917636][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 392.923461][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.928845][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 392.935010][ T31] watchdog+0x102d/0x1030 [ 392.939352][ T31] ? watchdog+0x1de/0x1030 [ 392.943785][ T31] kthread+0x70e/0x8a0 [ 392.947871][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.952561][ T31] ? __pfx_kthread+0x10/0x10 [ 392.957166][ T31] ? __pfx_kthread+0x10/0x10 [ 392.961769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.966976][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.972187][ T31] ? __pfx_kthread+0x10/0x10 [ 392.976786][ T31] ret_from_fork+0x4b/0x80 [ 392.981222][ T31] ? __pfx_kthread+0x10/0x10 [ 392.985911][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.990695][ T31] [ 392.993896][ T31] Kernel Offset: disabled [ 392.998229][ T31] Rebooting in 86400 seconds..